Forward Tracing vs Backward Vouching
| Aspect | Forward Tracing | Backward Vouching |
|---|---|---|
| Direction | Input → Output | Output → Input |
| Starting Point | User input forms | Reports / Logs |
| Main Objective | Completeness of processing | Validity of outputs |
| Risk Detected | Missing transactions | Fictitious transactions |
| Example | Trace customer order to report | Verify report entry back to source |
Forward Tracing (Completeness)
User Input
→
Input Interface
→
Application Processing
→
Database Storage
→
System Reports
→
Audit Verification
Example: Tracing a web order until it appears in the sales report.
Backward Vouching (Validity)
System Reports
←
Database Records
←
Application Processing
←
Input Interface
←
Original User Input
Example: Selecting a transaction from a report and verifying the original submission.
Audit Trail & Logging
Application Logs
→
Database Transaction Logs
→
Access Logs
→
Audit Trail Records
→
Security Monitoring / Audit Review
Advanced Information System Audit Architecture
User / Client
→
Web Server
→
Application Server
→
API / Business Logic
→
Database Transaction
→
Database Storage
→
Reports / Output
→
Auditor Investigation
Logging Layer
Web Server Logs
→
Application Logs
→
API Logs
→
DB Transaction Logs
→
Centralized Logging
→
Audit Trail Storage
Security Monitoring Layer
Security Monitoring
→
SIEM System
→
Fraud Detection & Compliance
Comments
Post a Comment