Unified Information System Audit Architecture

Forward Tracing vs Backward Vouching

Aspect Forward Tracing Backward Vouching
DirectionInput → OutputOutput → Input
Starting PointUser input formsReports / Logs
Main ObjectiveCompleteness of processingValidity of outputs
Risk DetectedMissing transactionsFictitious transactions
ExampleTrace customer order to reportVerify report entry back to source

Forward Tracing (Completeness)

User Input
Input Interface
Application Processing
Database Storage
System Reports
Audit Verification
Example: Tracing a web order until it appears in the sales report.

Backward Vouching (Validity)

System Reports
Database Records
Application Processing
Input Interface
Original User Input
Example: Selecting a transaction from a report and verifying the original submission.

Audit Trail & Logging

Application Logs
Database Transaction Logs
Access Logs
Audit Trail Records
Security Monitoring / Audit Review

Advanced Information System Audit Architecture

User / Client
Web Server
Application Server
API / Business Logic
Database Transaction
Database Storage
Reports / Output
Auditor Investigation

Logging Layer

Web Server Logs
Application Logs
API Logs
DB Transaction Logs
Centralized Logging
Audit Trail Storage

Security Monitoring Layer

Security Monitoring
SIEM System
Fraud Detection & Compliance

Comments

Popular posts from this blog

[MAIN PROGRAM] UNDONE HOUSEHOLD WORKs WEB-PROGRAM v2/MAIN

PENDING ITEMs [REVISION] v0