Internal controls and governance

Audit trail

The evidence that lets a reviewer reconstruct what happened, who acted, and why.

Plain definition

An audit trail is the linked record of a transaction or decision: the source request, supporting documents, system entries, approvals, changes, timestamps, and the people who made them. It lets someone who was not involved reconstruct what happened without relying on memory or a later verbal explanation.

A trail is useful only when evidence is identifiable, retained, and protected from silent alteration. It does not mean saving every email indiscriminately; it means preserving the evidence needed to understand a material action and its authority.

Illustrative example

Suppose a buyer changes the delivery address on a purchase order after the supplier has accepted it. The procurement system retains the original address, the change request, the reason, the buyer’s identity, the approving manager, and the updated order sent to the supplier. During a later dispute, the controller can see that the warehouse did not receive the first delivery because the address was changed, not because the supplier ignored the order.

The evidence allows the company to decide whether to accept the delivery, seek a credit, or investigate an unauthorised change. Without it, the team may argue from incomplete recollections and charge the wrong party.

An audit trail supports accountability and review; it is not a substitute for deciding whether the original action was authorised or sensible.

Why it matters

It makes corrections, investigations, and external or internal audit faster because the evidence chain is available.

It prevents a manager from treating a missing document as proof that no decision was made.

Practical consequence

For one important workflow, trace a completed item from request to final record and identify any step where the actor, evidence, or reason cannot be reconstructed.

Set retention, access, and change-history rules that fit the record’s risk, then test whether a reviewer can retrieve a representative trail without asking its original preparer.