The importance of traceable records

Issue 8 2021 Editor's Choice, Security Services & Risk Management

The topic of traceable records is very important to me. Perhaps it is because of a specific incident; I was the victim of fraud when a page with my signature for a specific document was used with a totally different document. I was able to prove that the document was not authentic and that my signature was fraudulently added to a document. But I was lucky as the page with my signature basically was a ‘blank cheque’.

Since then, I am very aware of the lack of traceable records in South Africa. Referring to records, I include digital records. It is very important to realise that such records can still be printed, uploaded, changed and used for various purposes such as performance assessments, job applications and supporting evidence in criminal and disciplinary cases. Some organisations and departments are still stuck on hard copies and most probably will be for some time.

This tendency is evident even in prominent organisations and departments. On my retirement, I had to embark on securing debit orders with my bank (a major bank group) that were previously coming straight off my salary. There, I was expected to sign a document with various pages while the page with my signature had no reference to the reason for my signature. The document did not even include the total number of pages for the specific document.

This naturally raises concerns on the level of fraud and corruption in South Africa. We are creating opportunities for fraud and corruption with records, forms and contract documents that are not traceable.

A few examples

Training records are very important in terms of being traceable as these records form the foundation of the person’s career. During the various recruitment drives in my career, it was very concerning to notice the lack of information on degrees, diplomas and certificates. Are these records traceable with absolute certainty to the trainee and training intervention? Will a record be available to certify – without doubt – who the person is that completed the specific qualification? Internal training records must include traceable information. Any name changes must be supported with records as previous training will be on record with a different name.

Training manuals need to be traceable to indicate for which period the specific training manual was effective. Any references in the training manual must be traceable for easy access and to ensure use of correct references.

Official correspondence needs to reflect on each page to which document or topic all the pages relate.

It is important that official directives, such as standard operating procedures, work instructions, health and safety directives, strategic plans and policies are traceable as these are regularly used, are often updated, often referred to, or become obsolete. Working instructions need to be uniquely identified to avoid any confusion.

Attendance registers need to include the topic of the meeting as well the date and venue on all pages. Often these records are part of disciplinary cases.

Forms without references and implementation date provide a question mark whether the form is the most recent or the correct form. If a form is traceable, it is very easy to ensure the correct form is completed and the reference can be used in other documents.

A certifiable and auditable chain

Supply chain processes and financial records are critical to have traceability for auditing purposes. Signatures on financial approvals for procurement, payments, contracts and services cannot be without traceability to ensure certainty on the purpose of the signatures. It is a good practise to utilise the serial numbers of items, such as equipment, as traceable information for payments, services and repairs. The serial number of equipment has a definite trail from the manufacturer, distributor, to the end user.

With legal records such as affidavits and wills, traceability is not negotiable. I believe a book can be written on the reasons that wills become invalid.

Another area where traceability is essential is with personnel records to avoid ghost workers and workers getting paid while not at the company anymore. Medical records can be secured with the patient details on all pages for traceability.

Certified copies of original documents need to include all references as on the original documents, even if outside the contents of the document as a footnote. Such an example is some matric certificates where it is often found that the document number is not included in the certified copy.

The purpose of witnesses’ signatures on documents and certification of documents must be taken seriously and done correctly. This exercise is not even done correctly by some of our legal practitioners.

Any corrections or changes on records and documents need to be done in such a manner that the original information is readable. With digital records the trail must be available on any changes.

Signing for traceability

Signatures must include date of the signature, especially where the record has more than one signature and there is more than one document with the same reference. The sequence of signatures as well as time frames is often a dispute in disciplinary hearings and even criminal matters.

Digital signatures and watermarks are effective, but require certain information once presented as part of legal records.

It is good to see many records and documents have barcodes, however, very seldom are the barcodes used to capture the information on systems and databases. Too often the information is manually captured, which leaves room for error. The majority of items are equipped with barcodes, which should be used as an available advantage and to ensure data integrity.

The advantages of traceable records

• Records relate to the purpose of the record.

• All the pages of documents are linked to the same document.

• Signatures are linked to the specific contents and purpose.

• Performance agreements are linked to specific standards and manuals.

• Records are not easily questioned on whether applicable or not.

• Uncertainty reduced in terms of which record/document is the most recent or active.

• Fraud and corruption reduced.

• A paper trail becomes an easy exercise when requested for criminal and disciplinary cases.

It is a mindset change, but once in place, management of any process or system is much easier and traceable records are the new normal. It leaves the following questions to be answered.

• How traceable are the records at your organisation to the signatures, contents, purpose and time frames?

• Was an audit performed to determine the level of compliance?

• When was the last audit performed? Does the process followed reduce opportunities for corruption and fraud?

If more organisations, departments and companies concentrate on the basics, such as traceable records, financial and time losses can be prevented.



Sonja de Klerk.

Sonja de Klerk retired from the SAPS Forensic Science Laboratory as a Brigadier. She provides expert advice on CCTV management to secure the images as evidence. She presents training courses on CCTV Management for the images to be presented in court, forensic evidence typical to expect as part of criminal activities, how to present expert testimony in court and the importance of traceable records. Her expertise is also available for independent and confidential audits or evaluations and consultation on traceability of the records of your organisation. She can be contacted at [email protected] or +27 82 778 9249.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

The line between locking residents out and restricting their access
News & Events Security Services & Risk Management Residential Estate (Industry)
A June 2026 High Court judgment has clarified one of the most contested issues in modern estate governance: when an HOA's digital access restrictions amount to unlawful self-help or spoliation, and when they do not.

Read more...
Modernise field communications with Push-to-Talk over Cellular
Products & Solutions Security Services & Risk Management
Sentiv is bringing Hytera’s Push-to-Talk over Cellular (PTToC) portfolio to organisations that need a more structured and controlled way to coordinate field teams, without extending a full private radio model to every team, site, or function.

Read more...
Zero-touch automation certificate life cycle management loop
Products & Solutions Information Security Security Services & Risk Management
ManageEngine completes the certificate life cycle management loop with CA-agnostic, zero-touch automation. New post-deployment automation in Key Manager Plus removes the last manual step in certificate renewal as lifespans gradually shrink to 47 days

Read more...
Fire safety in South Africa
Technoswitch Fire Detection & Suppression Technews Publishing SMART Security Solutions Fire & Safety Security Services & Risk Management Editor's Choice
Fire safety is sometimes ignored, sometimes relegated to whatever is cheapest, and sometimes treated with the seriousness it deserves, given that it focuses on protecting life and assets. SMART Security Solutions asked Brett Birch, MD of Technoswitch, for some insights into the realities of fire safety in South Africa.

Read more...
Sophos launches AI-native cybersecurity defence system
News & Events Information Security Security Services & Risk Management
Built for a threat landscape reshaped by AI, Sophos Fusion unites security operations, endpoint, network security, identity, email, and cloud into one defence system that prevents, detects, investigates, and responds at AI speed.

Read more...
Stop supplier fraud at the moment of payment
News & Events Security Services & Risk Management
Cape Town-built platform bridges the gap between onboarding and transaction by securing identity inside the live channels where companies exchange invoices and banking details.

Read more...
Alarms are smarter than ever
Spectrum Security Products Technews Publishing SMART Security Solutions Arxtech Perimeter Security, Alarms & Intruder Detection
Modern smart alarms are evolving beyond simple sirens and basic alerts. They now include features such as system health checks, remote management, real-time notifications, mobile apps, and multiple communication options.

Read more...
Ungoverned AI agents and deepfakes pose critical threats
Information Security Security Services & Risk Management
Global study reveals 64% of South African organisations already deploy autonomous AI agents with little to no governance, while 63% of employees admit they are unlikely to be able to spot attacks such as deepfakes

Read more...
From the editor's desk: The high price of cheap
Technews Publishing News & Events
Bringing fire and safety, along with intrusion and perimeter protection, into the same publication is an interesting exercise. At their core, all these systems exist for one reason: to warn people ...

Read more...
Balancing secure access control and fire safety
Editor's Choice Access Control & Identity Management Fire & Safety
In modern building management, few topics create as much tension as the intersection between security access control and fire evacuation safety. Nichola Allen of G2 Fire sheds light on this delicate balance.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.