Skip to content

EntiHub Documentation

Supplier Critical-Change / Fraud

Supplier Critical-Change / Fraud Registry

The value is controlling dangerous changes—not only the supplier master. Dual control and risk flags protect AP/ERP payments.

Why this is needed

Vendor payment fraud often starts with a silent IBAN change.
Maker/checker on bank details is a concrete monetizable control.
One prevented fraudulent payment can fund the platform for years.

Proposed entities in EntiHub

Governance settings

Setting	Recommended value	Why
`approvalRequired`	`true`	Dual control: requester cannot approve.
`historyEnabled`	`true`	Long history for fraud investigations.
`allowSameAuthorApproval`	`false`	Maker/checker separation for sensitive changes.
`deletedRetentionDays`	`90` (or higher)	Soft-delete retention for auditability.

Entity definition (YAML sketch)

name: supplier_critical_change
displayName: Supplier critical change
domain: Procurement Risk
description: Supplier critical change
version: "1.0.0"
approvalRequired: true
historyEnabled: true
deletedRetentionDays: 90
displayRefColumn: change_code
uniqueConstraints:
  - name: uq_supplier_critical_change_change_code
    columns: [change_code]
anomalyDetection:
  enabled: true
columns:
  - name: change_code
    dataType: string
    nullable: false
    maxLength: 64
  - name: supplier_code
    dataType: string
    nullable: false
    maxLength: 64
  - name: change_type
    dataType: string
    nullable: false
    maxLength: 32
  - name: old_value
    dataType: string
    nullable: true
    maxLength: 512
  - name: new_value
    dataType: string
    nullable: false
    maxLength: 512
  - name: risk_flag
    dataType: string
    nullable: false
    maxLength: 16
  - name: status
    dataType: string
    nullable: false
    maxLength: 16

YAML sketches

Sketches highlight the important fields and governance flags. Trim or extend columns to match your domain. See Setup Entity for the full YAML reference.

Sample data

change_code	supplier_code	change_type	old_value	new_value	risk_flag	status
SCC-10091	SUP-4421	bank_account	SK31...1111	SK99...9999	high	pending

Benefits for the company

Stops single-person bank-detail changes.
Risk flags feed AP hold / ERP webhooks.
Clear ROI for finance and security sponsors.