Process | Technology | Us

 

 

 
 
Case Studies - Risk Consulting: November 2008

Saturday, November 29, 2008

Terrorist Attack on Taj & Trident

Before I give account of the topic I have selected today, I would like to brief you on 'where I am coming from'. I am among the fortunate ones who have done Internal Audit of five star hotels like Taj & JW Marriott in Mumbai and have spent a considerable time of my career doing these Internal Audits. My first Internal Auditing lesson had come from doing Internal Auditing at Taj. My Internal Auditing style resembles my work at these five star hotels i.e. systems audit. When I say Systems Audit, I do not mean IT systems audit but Business Systems Audit. All who have done Taj Internal Audit before TPAM audit started there will understand what I am saying.

Now, I would like to share a specific Internal Control which I think has never been paid attention to, which I think is not only important from Revenue Assurance point of view but also from security point of view.

Like every business, inventory of these hospitality giants are also required to be reconciled and physically verified. There are two kinds of perishable inventory which a hospitality unit like Taj might carry. One is connected to their F&B business and other is connected to their Room Revenue business. We will talk about their Room Revenue Business Inventory called Room Nights. Inventory made of Time & Space which is sold to its Guests.

How do you physically verify such an inventory which is made up of Time & Space? Historical records will not serve the purpose as one cannot go back in time to do a physical verification once you have moved ahead in time. I am sorry; but we have still not invented something called Time Machine.

Thus, concurrent physical stock taking is the only solution available. Now-a-days most of the hotels have software to manage its room inventory. One can tell if a room is occupied or not. Front Office keeps track of room folios opened with a formal check-in and check-out procedures. Most often than not housekeeping department in the hotel perform a check to physically verify status of the room once or twice a day. They update system with room status independently verified by them.

When we have two sets of inventory data, we reconcile them and if there are discrepancies or variances, we would go and find out cause for the discrepancies. If room is occupied as per Front Desk record but vacant as per housekeeping than we have a situation called 'Skipper' and when room is vacant as per front office desk but occupied as per housekeeping it's called 'Sleeper'.

Both the cases involve a possible leakage of revenue for the hospitality unit. Along with this room status control, a few hotels also resort to something called baggage control. No. of patrons staying in a room etc to make this control complete. Most often than not, I have found serious lacuna in the said control. Inspite of reporting it several times to various hotel unit managements, this control has never been taken seriously by any one and always has ranked as a low risk area.

It's important that the managements of these hotels understand risk of having inventory that is made up of Space & Time and its possible abuse by any unscrupulous person.

Housekeeping department although independent from the front desk personnel to verify the room stock is not properly trained to verify the physical status of the room when they visit a room for cleaning or otherwise. Second issue is that, the housekeeping department in most of the hotels submits this room status discrepancy report only to Front Office Manager instead of Security Manager or Loss Prevention Manager along with Front Office Manager. Moreover, the luggage brought by the guests are also not tracked and controlled to ensure an effective status control activity. Currently, the control is too mechanical and that too is adhered to half heartedly and does not ensure a subsequent procedure to ensure no leakage of revenue or a security threat. In simple words, hotel management should know intelligently what is happening at every room without disturbing privacy of the guest.

I am sure the recent attacks on Taj & Trident will ensure strengthening of this control further in light of this new risk lurking on the hospitality industry. I also see improvement possibility in gate security and guest room key control procedures.
I also feel strongly that there is something wrong with the procedures where the hoteliers have to submit details of the foriegn nationals staying in their hotels to the local police station on an every day basis. Its possible that police station takes these reports, stamps it and sit back without doing much scruitiny of these records.

My heartfelt condolence to the families of those who have affected by the recent inhuman act of terror at Taj, Trident and Nariman House.

Labels: , ,

Sunday, November 23, 2008

The Invisible Act


When cheaters are invisible, there is surge in crime levels. When victims are invisible; result is the same.

It was almost an hour after the midnight. You could hardly hear your own voice due to the loud heart beating music in the pub. The auditor on a surprise visit who was not known to the bartender was trying to give cash to buy a drink. The bartender shouted that he needs coupons as taking cash is not allowed. The auditor shouted back, don't you know me, I come here every month; I always have paid cash here and no body denied it earlier. The bartender smiled and came closer and whispered - sorry sir, but we are being watched today.

Let's ponder on the above phenomena by way of a short story. A student named Vishnu Prasad Singh puts on a magical bracelet and founds that it made him invisible. With no one able to monitor his behavior, he proceeded to do woeful things - seduce a girl, murder her boy friend, and so on. This story posed a moral question, could any man resist the temptation of evil if he knew his acts could not be witnessed.

Paul Feldman's research says although there is no economic benefit in living a morale life, there is evidently some principles in man's nature, which interests him to do so. The research goes on to conclude that 87 % of the times people are honest and do not cheat. His research explains that cheating activities change with weather conditions, economic and political scenarios, and even they are different with different days of the year. Paul's estimate of 87 % is subject to presence of reasonable level of internal controls and safe guarding of the assets as appropriate.

Working environment, size of office and nature of boss are also among the factors which affect the level of cheating by the white collars. His research also found out that employees up the corporate ladder cheat more than those down below. Possibly this is due to the reason that they are not being monitored as much as the people down below. ( Alarm for Audit Committee !!!)

Although, we are aware and have read about many white collar crimes, we know very little about practicalities of the white collar crime at the various levels. The reason is that there are very few cases which have been reported and have come to light and the most of the embezzlers lead quite and theoretically happy lives as they have not been detected.

When you don't know who the victims of white collar crimes were, you also don't know with what frequency or in what magnitude it happened. Now there is a question - from whom, exactly, did the master of Enron steal? These cheaters had remained invisible to the victims and vise versa.

Amazingly, the silent theft of our shared wealth has gone largely unnoticed because we have lost our ability to see the commons. What to say about the white collars who are amongst us.

Labels: ,