## Audit Trail

An audit trail is a documented, step-by-step flow of a transaction that traces financial data from its source document through to the financial statements.

### Primary Purposes

Establishes authentication and integrity of transactions
Maintains records of system and user activity (e.g., log-on attempts, devices used)
Acts as a record-keeper to reduce fraud, material errors, and unauthorised use

### Benefits at a Glance

Benefit	Explanation
Fraud prevention	Reduces opportunity for unauthorised transactions
Fixing responsibility	Identifies who performed or authorised a transaction
Rebuilding events	Reconstructs what happened when a problem occurs
Problem analysis	Specifies the reason behind discrepancies or system failures
Data security	Enhances internal controls; deters unauthorised access
System verification	Confirms systems operate as intended

### Auditor's Perspective

Systems with audit trail features inspire confidence in auditors
Helps verify whether management's controls were operating effectively
Confirms whether transactions were performed by authorised persons
Increases reliability of audit evidence because audit procedures can be substantiated

### Costs and Limitations

Cost in terms of system infrastructure and expenditure
Cost in terms of time needed to analyse large volumes of data
Mitigation: Automated tools can efficiently analyse large volumes of audit trail data

> Audit trails are not free — the cost-benefit trade-off must be considered when designing internal control systems.

Worked example

### Example 1

A bank's IT system logs every log-on attempt with user ID, timestamp, and device used. An auditor reviews these logs to verify only authorised personnel accessed sensitive payment processing systems — this is an audit trail supporting the operating effectiveness of access controls.

### Example 2

An auditor traces a single sales transaction: Customer Purchase Order → Delivery Note → Sales Invoice → Journal Entry → Ledger → Trial Balance → Income Statement line item. This complete chain is the audit trail for that transaction, allowing the auditor to verify Occurrence, Accuracy, and Classification.

⚠️ Common exam mistakes

Thinking audit trails are only relevant in computerised/IT environments — audit trails exist in manual systems too (paper-based approval chains, physical sign-off registers).
Ignoring the cost aspect when discussing audit trails — examiners expect acknowledgment of both benefits and costs, including time and system expenditure.
Assuming audit trails eliminate the need for other audit procedures — they are a source of evidence and enhance confidence, but do not replace substantive testing.

Reference:

Now that you've read this — what's next?

Move from understanding → mastery in 3 clicks. Each option below picks up from this lesson's topic.

🔥 Drill 5 Qs on this → ✍️ Adaptive practice →