How Companies Can Manage Spreadsheet Risk [Part 2 of 4]

Share

Facebook
Twitter
LinkedIn

This series of articles will give you an overview of how to manage spreadsheet risk. These articles are written by Myles Arnott from Excel Audit

Introduction to Spreadsheet Risk Management

In the first article in this series we highlighted the risks that poorly managed spreadsheet solutions can introduce to a business. In this article we will demonstrate how companies can manage this risk.

A formal governance framework

The first, and arguably most important step is to ensure that the senior management team buy into the need for a robust spreadsheet risk management framework, and that they define and effectively communicate their spreadsheet risk management policy.

Spreadsheets identified and catalogued

It is impossible to know the level of spreadsheet risk in an organization without first identifying and then risk assessing all of the spreadsheets. It is therefore necessary to create a catalog of all of the spreadsheets and then to gather the key information about each spreadsheet to enable a risk assessment to be carried out.

The two key factors for determining the spreadsheet risk are the probability of there being an error and the impact that that error could have.

Risk = Probability of an error  X  impact if an error were to occur

The probability of error is related to the complexity of the spreadsheet. Complexity attributes differ across companies but include:

  • Spreadsheet size (Mbs)
  • Spreadsheet design (hard coded numbers in formulae, poor model structuring etc)
  • The number of users
  • The use of complex formulae (particularly array formulae, nested formulae etc)
  • The number of cells populated
  • The number of internal and external links
  • The use of VBA

The impact of the error is related to how critical the spreadsheet is within the business. Each company will have a slightly different definition of the impact levels of spreadsheets, but generally:

  • A spreadsheet is low impact if it is not used as part of a critical business process and an error would not have a material impact on the business.
  • A spreadsheet is medium impact if it contains confidential information and an error could have a material impact on the business.
  • A spreadsheet is high impact if it contains highly confidential information and an error would have a significant impact on the business. Spreadsheets used within processes that fall under external regulation (such as Sarbanes-Oxley and Solvency II) are deemed to be of high impact.

Finally, the spreadsheets should be placed in order of risk. Those identified as business critical and high risk should be prioritized for detailed review and placed under control.

This is clearly an on-going process. As new spreadsheets are developed they will need to pass through the risk assessment process as defined by the company’s spreadsheet risk management policy. A periodic review should also be carried out to ensure that all spreadsheets have been correctly categorized.

A best practice standard

The company should define its own best practice spreadsheet development standard that is applied to spreadsheets deemed to be medium or high impact. The standard should clearly outline the standards and conventions to which a spreadsheet should be built. New developments can then be reviewed to ensure that they adhere to the standard.

We advocate the use of the Excel Best Practice Standard from the Spreadsheet Standards Review Board (‘SSRB’).

We also recommend that tailored schedules are added to the standard to reflect your specific design standards. For example this could be a specific color scheme, use of logo or the use of specific text within the header or footer (e.g. document security levels).

Testing

A fundamental, but often overlooked step in the Excel model development cycle is testing. All spreadsheets (but especially business critical spreadsheets) need to be first peer reviewed and then rigorously tested.

It helps to consider the steps that an IT department would take to ensure that something they deliver is correct. It will pass through stages of unit and system testing prior to quality assurance and finally user acceptance testing. So why should a spreadsheet being used for a critical process be any different?

The fact is that no matter how hard we try, humans make errors. The purpose of testing is to identify them and get them resolved before the model goes into the live environment.

Remember that in the first article we highlighted the fact that 94% of spreadsheets and 5% of all formulae within spreadsheets contain errors.

Here is Scott Adams’ view on spreadsheet testing in Dilbert

 

 

Training

All staff should be trained so that they have sufficient Excel knowledge for their role and to use the spreadsheets that they are responsible for. As part of the induction process all staff should also be taught the company’s best practice standard.

Whilst this sounds obvious, research has shown that few companies prioritize investment in spreadsheet training.

 

Documentation

A key risk with spreadsheets is that they are often built and used by one individual within a team (often referred to as a “key man dependency”). If this person is ill or leaves unexpectedly the other members are totally reliant on the documentation left behind. From experience this rarely exists.

Each spreadsheet that is used within a process should as a bare minimum have documentation stating:

  • the purpose of the spreadsheet;
  • how the spreadsheet fits within the process;
  • the source of all inputs for the spreadsheet;
  • all key assumptions and drivers;
  • key calculations;
  • distribution list for outputs.

Spreadsheets that are part of as critical business process should have detailed documentation. This should include a technical specification and user notes.

 

Security

All business critical and confidential spreadsheets should be subject to access control. Security controls can be implemented across three levels:

  • Directory level: Only specific individuals have access to key directories
  • File level: Confidential and critical spreadsheets should be password protected to restrict access
  • Cell level: Non-input cells should be password protected

 

Change control, backups and archives

To minimize the risk of losing the current version of a spreadsheet and ensuring that the correct version is being used at all times, all business critical spreadsheets should be backed up, archived and subject to change control procedures.


So, in summary..,

the characteristics of a well-managed environment are:

  • a formal governance framework, sponsored by the senior management team, is in place for all spreadsheet development;
  • a catalog of spreadsheets is maintained and prioritized by risk profile;
  • a best practice standard is applied to the development of all new spreadsheets;
  • all new spreadsheets pass through a formal risk assessment, are peer reviewed and formally tested;
  • staff are provided with sufficient training to carry out their roles;
  • all spreadsheets and their associated processes are well documented;
  • access to critical spreadsheets is subject to security controls;
  • spreadsheets are subject to change control and are regularly backed up and archived.

What next?

In the next article we will look at the built in Excel functions that can help you to manage spreadsheet risk.

What about you?

How do you (or your company) manage spreadsheet risk? What best practices & guidelines you follow? Please share using comments.

Thank you Myles

Many thanks to Myles for writing this series. Your experience in this area is invaluable. If you enjoy this series, drop a note of thanks to Myles thru comments. You can also reach him at Excel Audit or his linkedin profile.

Facebook
Twitter
LinkedIn

Share this tip with your colleagues

Excel and Power BI tips - Chandoo.org Newsletter

Get FREE Excel + Power BI Tips

Simple, fun and useful emails, once per week.

Learn & be awesome.

Welcome to Chandoo.org

Thank you so much for visiting. My aim is to make you awesome in Excel & Power BI. I do this by sharing videos, tips, examples and downloads on this website. There are more than 1,000 pages with all things Excel, Power BI, Dashboards & VBA here. Go ahead and spend few minutes to be AWESOME.

Read my storyFREE Excel tips book

Overall I learned a lot and I thought you did a great job of explaining how to do things. This will definitely elevate my reporting in the future.
Rebekah S
Reporting Analyst
Excel formula list - 100+ examples and howto guide for you

From simple to complex, there is a formula for every occasion. Check out the list now.

Calendars, invoices, trackers and much more. All free, fun and fantastic.

Advanced Pivot Table tricks

Power Query, Data model, DAX, Filters, Slicers, Conditional formats and beautiful charts. It's all here.

Still on fence about Power BI? In this getting started guide, learn what is Power BI, how to get it and how to create your first report from scratch.

32 Responses to “Extract Numbers from Text using Excel VBA [Video]”

  1. ScottW says:

    Interesting that you are posting this at the same time as Doug http://yoursumbuddy.com/regex-function-sum-numbers-string/

    • Luke M says:

      Looks like two different articles about two different subjects, extracting numbers in text vs. summing all the numbers in text. Also, articles are published 20 days apart. Is the interesting part that there were two articles written about Visual Basic techniques within this month?

      • Luke M says:

        Sorry, that should have said 1 day, not 20. Was looking at the wrong thing. I still think it's just a nice coincidences to have multiple articles about VB written. Dick Kusleika also routinely writes about VB at dailydoseofexcel.com

    • Chandoo says:

      What a lucky coincidence. I know about Doug's blog, but havent had a chance to read it in a while. Thanks for sharing the link.

  2. Don Hopkins says:

    I think that the best lesson that can come from the several salary survey solutions is that one should have anticipated the variety of monetary units.  If the survey utilized drop down currency lists and limited the salary field to whole numbers only, etc. the resulting input would have been far cleaner. Sorry, Chandoo, but the messy input was, in my opinion, self-inflicted.

    • Chandoo says:

      You are right. Since there are more than 200 different currencies, I thought a currency field would complicate the survey. The bigger problem was, Google Docs (which I used for survey) does not have an option to capture only numbers. Input fields were by text, so people entered in lots of different formats.

      But I am happy how it turned out. It taught me several lessons on how to clean data.

      Next time I will use a better tool to capture such responses.

  3. Crisu says:

    Your post made me check how the "regular" and "irregular" decimal separators look like in different countries and it appears to be really interesting case. Take a look:
    http://en.wikipedia.org/wiki/Decimal_mark
    Cheers.
     

  4. I am pretty sure you can replace this code block from your article...

    If Text Like "*.*,*" Then
      european = True
    Else
      european = False
    End If

    with this single line of code...
     
    european = Format$(0, ".") = ","
     

    • Just to follow up on my previous post, I think I may have misunderstood the intent of your code. You were not looking to see if the computer system was using a dot for the decimal point, rather, you were looking to see if the Text was using a dot as the decimal point, weren't you? If so, then you could use this single line of code as to replace your If..Then..Else block...

      european = Text Like "*.*,*"

      But what if the number in Text was not large enough to display a thousands separator? Or what if it were a whole number? In either of those cases your original test, and my replacement for it, will fail. Maybe this would be a better test...

      european = Right(Format$(Text, "."), 1) = "," 

      • Chandoo says:

        You are right. I am checking if the text has European format. And I loved your one line shortcut. I did not think of using LIKE in such context. Thanks for sharing that.

         

        Again, you are right that this method would fail if the number is not big enough for a thousands separator. Since my data has annual salaries, all numbers are usually in thousands. So I did not think about it.

      • Yam says:

        Hi ,

        I have a question please. I'm working on a report that has alphanumeric on it and I only need to retrieve 7 integers that starts with 7 and 3 example SCM RIS PX RIS 02 - 7152349, ADSF\243434134, CM532345 and i need to get the 7152349. Can you please help me on this? I truly appreciate your help!
        Thank you very much!

  5. Tayyab Hussain says:

    Hi-

    The post was wonderful. Please take a look at this function also

    Function ExtractNumber(InputString As String) As String
    'Function evaluates an input string character by character
    ' and returns numeric only characters
    'Declare counter variable
    Dim i As Integer
    'Reset input variable
    ExtractNumber = ""
    'Begin iteration; repeat for the length of the input string
    For i = 1 To Len(InputString)
    'Test current character for number
    If IsNumeric(Mid(InputString, i, 1)) Then
    'If number is found, add it to the output string
    ExtractNumber = ExtractNumber & Mid(InputString, i, 1)
    End If
    Next i
    End Function

    • Bone Bone Gyi says:

      Thank you so much. Your function code is amazing. It very useful for my lesson. Thank you so much.

  6. hpchavaz says:

    To be more international.

    At the beginning, for the rench format :

    If fromThis.Value Like "*.*,*" Or fromThis.Value Like "* *,*" Then

        european = True
    End If

    And at the end :

    ElseIf ltr = "," And european And Len(retVal) > 0 Then
        retVal = retVal & Application.DecimalSeparator
    End If
     

  7. Kris says:

    Hi Chandoo,
    Sorry, but your code does not work correctly with my Hungarian excel. My decimal separator is "," so
    getNumber = CDbl(retVal)
    will not convert the string to value, because you hard-coded "." as separator.
    And, as you mentioned: "method would fail if the number is not big enough for a thousands separator" I would like to add: would fail if the user did not enter the thousand separator and also would fail if the thousand separator is not "," nor "." but " " (space chr) - as in Hungary.
    This two functions could help to determine the system settings:
    application.DecimalSeparator
    application.ThousandsSeparator
     
    Conclusion:
    you say: "We do not need special treatment for regular format (61,000.30) as Excel & VBA are capable of dealing with these numbers by default." - it is true in case you system uses the regular format. 🙂
     
    Cheers,
    Kris

  8. Deependra says:

    Awesome! It works !!
    But how does one take into account negative numbers (say the list has negative numbers and I want to retain those negative numbers)
     
    Thanks.

  9. Akmal says:

    Hi. When I download this example, my excel is not showing formulas exactly. I wanted a ready version of this example, please. Thank you

  10. Kenny says:

    Hi Chandoo,

    Thanks for this brilliant article like many others that you have written for the benefit of many. Unfortunately, I am constantly having problems downloading your sample workbooks. I am currently using Excel 2007, and each time I try to download any of your sample workbooks, for e.g. the 'Extract Numbers Using VBA workbook', I get the following message 'This file is not in a recognizable format'.

    I always get this message each time I try to download any of your sample workbooks. Please kindly advise me on how to resolve this.

    Thank you.

    Kenny

  11. Madhav says:

    I have numbers like 12345-12-1 which I want to extract from text strings. 12345 might be variable there as 123, 1234, 12345, 123456,1234567 or so. When I get that in other cell (Column) I should see multiple entries of similar numbers with - (hyphen). How to do that?

  12. Madhav says:

    Thanks Hui for your response. Thank you for your time to find potential solution for my problem.

    I tried your formula but was not successful in using the same.

    here is more clarification so that you/others could help me.

    Column A has following in Cells A1 to A4.. could be long..
    ABCD 12345-12-1 XYZ 9878-02-9
    LMNOPQ 12345-12-1 STQ 789748-98-5
    NFHFKDJFKDS 123-23-1, NDKANSD
    A FDSAFNDS 12345-12-1, ASNDSAND

    from such data I need to extract the number with hyphens
    remove , immediately after the numbers, separate the numbers with spaces

    Column B shall look like:
    12345-12-1 9878-02-9
    12345-12-1 789748-98-5
    123-23-1
    2345-12-1

    2 separate strings (numbers) having hyphen (-) therein should be separated with space.

      • Madhav says:

        Thanks Hui that worked well with the examples I provided.
        I should have given following type of example:
        2-ABCD 12345-12-1 X-2-YZ 9878-02-9

        in the above case I do not want to extract a number and hyphen which is connected to or is part of text string..

        Can you please help me modify the code to ignore numbers and - with text string.?

        Thanks in advance.

        • Hui... says:

          @Madhav

          So what is the answer expected from
          2-ABCD 12345-12-1 X-2-YZ 9878-02-9

          • Madhav says:

            Thanks for your interest and time Hui.

            so when I have text like
            2-ABCD 12345-12-1 X-2-YZ 9878-02-9 3-abc-4-efg in Cell A2
            in B2 the answer should be only numbers with hyphens and no text with numbers or hyphens
            12345-12-1 9878-02-9 OR
            12345-12-1 some delimiter (, or 😉 9878-02-9

            The logic I thought was (but unable to do)
            1. remove all strings containing text (and - and numbers) and then extract only numbers containing hyphens
            2. Extract numbers in only following format ( # is a digit below) and ignore numbers and hyphens in any other format
            #######-##-#
            ######-##-#
            #####-##-#
            ####-##-#
            ###-##-#
            ##-##-#

            Hope this helps.

  13. Thomas Huettemann says:

    Why not just use the function =getNumber ?

    • Madhav says:

      =getnumber doesn't extract numbers with hyphens..
      also need to ignore numbers and hyphens associated with text string

  14. Deepak says:

    When I use this code that code give me error
    cdb1 is not highlight can u explain me

    • Hui... says:

      @Deepak

      It runs fine for me
      Select the first line and Press F9 to set a stop point
      goto a cell and edit the function and press Enter
      Then you can step through the code when it runs using F8
      report back what happens

  15. Yamin says:

    HI,
    How can we add spaces between numbers and removing decimals.

  16. Yamin says:

    how can we make spaces in the reesult e.g 25 655 2335

  17. Avinash says:

    Dear Team,

    I need to extract number (cheque number) from a cell (some numbers may repeat that to be ignored),

    Text is - :-Inward Clg Cheque 00992924 00992924,BD
    Result should be - 992924

    Kindly help in getting formula for this (please email the code or VBA Code)

Leave a Reply