The Beat recently published an opinion-based article entitled, The Business Reality of Open Booking that I thought presented a good opportunity for debate. The article’s author is clearly against open booking stating, “Open Booking rests upon a theoretical foundation that is distant from the real world and requires us to suspend belief in how travel distribution works if we are to adopt it.” I respectfully disagree with the author’s point that Open Bookings equate to a lack of management and control because the TMC is not in place as a preventive measure. Even in the world of Sarbanes Oxley, preventive controls aren’t always the best answer particularly when the preventive controls induce a high friction bureaucratic environment. Often detective controls provide a lower cost method to comparably reduce risk.

My favorite example is segregation of duties (SoD). The concept behind SoD is having two or more people involved in a transaction lowers fraud risk. Therefore the auditors mandated that each employee be given very strictly defined privileges in the financial software such that the same person couldn’t for example both approve a PO and payment. The net result is a highly sclerotic work environment.

But let’s take a step back, the actual issue isn’t that one person can perform both functions, it’s that the same person doesn’t perform both functions in any single transaction. To reduce the bureaucracy explain SoD principles to employees, empower them to get work done and adopt a trust but verify approach. A detective control would check each transaction and when one person violates SoD principles in any given transaction that transaction is escalated for review by a third party. Now we are both preventing fraud and enabling a flexible work force. When you have a repeat SoD offender you can invoke the preventive controls.

The same logic applies to Open Bookings.

Topics Discussed