The importance of traceable records

Issue 8 2021 Editor's Choice, Security Services & Risk Management

The topic of traceable records is very important to me. Perhaps it is because of a specific incident; I was the victim of fraud when a page with my signature for a specific document was used with a totally different document. I was able to prove that the document was not authentic and that my signature was fraudulently added to a document. But I was lucky as the page with my signature basically was a ‘blank cheque’.

Since then, I am very aware of the lack of traceable records in South Africa. Referring to records, I include digital records. It is very important to realise that such records can still be printed, uploaded, changed and used for various purposes such as performance assessments, job applications and supporting evidence in criminal and disciplinary cases. Some organisations and departments are still stuck on hard copies and most probably will be for some time.

This tendency is evident even in prominent organisations and departments. On my retirement, I had to embark on securing debit orders with my bank (a major bank group) that were previously coming straight off my salary. There, I was expected to sign a document with various pages while the page with my signature had no reference to the reason for my signature. The document did not even include the total number of pages for the specific document.

This naturally raises concerns on the level of fraud and corruption in South Africa. We are creating opportunities for fraud and corruption with records, forms and contract documents that are not traceable.

A few examples

Training records are very important in terms of being traceable as these records form the foundation of the person’s career. During the various recruitment drives in my career, it was very concerning to notice the lack of information on degrees, diplomas and certificates. Are these records traceable with absolute certainty to the trainee and training intervention? Will a record be available to certify – without doubt – who the person is that completed the specific qualification? Internal training records must include traceable information. Any name changes must be supported with records as previous training will be on record with a different name.

Training manuals need to be traceable to indicate for which period the specific training manual was effective. Any references in the training manual must be traceable for easy access and to ensure use of correct references.

Official correspondence needs to reflect on each page to which document or topic all the pages relate.

It is important that official directives, such as standard operating procedures, work instructions, health and safety directives, strategic plans and policies are traceable as these are regularly used, are often updated, often referred to, or become obsolete. Working instructions need to be uniquely identified to avoid any confusion.

Attendance registers need to include the topic of the meeting as well the date and venue on all pages. Often these records are part of disciplinary cases.

Forms without references and implementation date provide a question mark whether the form is the most recent or the correct form. If a form is traceable, it is very easy to ensure the correct form is completed and the reference can be used in other documents.

A certifiable and auditable chain

Supply chain processes and financial records are critical to have traceability for auditing purposes. Signatures on financial approvals for procurement, payments, contracts and services cannot be without traceability to ensure certainty on the purpose of the signatures. It is a good practise to utilise the serial numbers of items, such as equipment, as traceable information for payments, services and repairs. The serial number of equipment has a definite trail from the manufacturer, distributor, to the end user.

With legal records such as affidavits and wills, traceability is not negotiable. I believe a book can be written on the reasons that wills become invalid.

Another area where traceability is essential is with personnel records to avoid ghost workers and workers getting paid while not at the company anymore. Medical records can be secured with the patient details on all pages for traceability.

Certified copies of original documents need to include all references as on the original documents, even if outside the contents of the document as a footnote. Such an example is some matric certificates where it is often found that the document number is not included in the certified copy.

The purpose of witnesses’ signatures on documents and certification of documents must be taken seriously and done correctly. This exercise is not even done correctly by some of our legal practitioners.

Any corrections or changes on records and documents need to be done in such a manner that the original information is readable. With digital records the trail must be available on any changes.

Signing for traceability

Signatures must include date of the signature, especially where the record has more than one signature and there is more than one document with the same reference. The sequence of signatures as well as time frames is often a dispute in disciplinary hearings and even criminal matters.

Digital signatures and watermarks are effective, but require certain information once presented as part of legal records.

It is good to see many records and documents have barcodes, however, very seldom are the barcodes used to capture the information on systems and databases. Too often the information is manually captured, which leaves room for error. The majority of items are equipped with barcodes, which should be used as an available advantage and to ensure data integrity.

The advantages of traceable records

• Records relate to the purpose of the record.

• All the pages of documents are linked to the same document.

• Signatures are linked to the specific contents and purpose.

• Performance agreements are linked to specific standards and manuals.

• Records are not easily questioned on whether applicable or not.

• Uncertainty reduced in terms of which record/document is the most recent or active.

• Fraud and corruption reduced.

• A paper trail becomes an easy exercise when requested for criminal and disciplinary cases.

It is a mindset change, but once in place, management of any process or system is much easier and traceable records are the new normal. It leaves the following questions to be answered.

• How traceable are the records at your organisation to the signatures, contents, purpose and time frames?

• Was an audit performed to determine the level of compliance?

• When was the last audit performed? Does the process followed reduce opportunities for corruption and fraud?

If more organisations, departments and companies concentrate on the basics, such as traceable records, financial and time losses can be prevented.



Sonja de Klerk.

Sonja de Klerk retired from the SAPS Forensic Science Laboratory as a Brigadier. She provides expert advice on CCTV management to secure the images as evidence. She presents training courses on CCTV Management for the images to be presented in court, forensic evidence typical to expect as part of criminal activities, how to present expert testimony in court and the importance of traceable records. Her expertise is also available for independent and confidential audits or evaluations and consultation on traceability of the records of your organisation. She can be contacted at [email protected] or +27 82 778 9249.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

AI-enabled tools reducing time to value and enhancing application security
Editor's Choice
Next-generation AI tools are adding new layers of intelligent testing, audit, security, and assurance to the application development lifecycle, reducing risk, and improving time to value while augmenting the overall security posture.

Read more...
2024 State of Security Report
Editor's Choice
Mobile IDs, MFA and sustainability emerge as top trends in HID Global’s 2024 State of Security Report, with artificial intelligence appearing in the conversation for the first time.

Read more...
Cyberthreats facing SMBs
Editor's Choice
Data and credential theft malware were the top two threats against SMBs in 2023, accounting for nearly 50% of all malware targeting this market segment. Ransomware is still the biggest threat.

Read more...
Are we our own worst enemy?
Editor's Choice
Sonja de Klerk believes the day-to-day issues we face can serve as opportunities for personal growth and empowerment, enabling us to contribute to creating a better and safer environment for ourselves and South Africa.

Read more...
How to spot a cyberattack if you are not a security pro
Editor's Choice
Cybersecurity awareness is straightforward if you know what to look for; vigilance and knowledge are our most potent weapons and the good news is that anyone can grasp the basics and spot suspicious activities.

Read more...
Protecting IP and secret data in the age of AI
Editor's Choice
The promise of artificial intelligence (AI) is a source of near-continuous hype for South Africans. However, for enterprises implementing AI solutions, there are some important considerations regarding their intellectual property (IP) and secret data.

Read more...
Super election year increases risks of political violence
Editor's Choice
Widening polarisation is expected in many elections, with terrorism, civil unrest, and environmental activism risks intensifying in a volatile geopolitical environment. Multinational businesses show an increasing interest in political violence insurance coverage in mitigation.

Read more...
Digital transformation in mines
NEC XON Technews Publishing Mining (Industry)
Digital transformation has been hyped to death, but is a reality all companies in all industries need to address, including the mining sector. BCX and NEC XON weigh in on the challenges mines face.

Read more...
Fire safety in mining
Technews Publishing Mining (Industry)
Clinton Hodgson, Head of the Industrial Fire & Life Safety Division at FS Systems International, provides SMART Security Solutions with his insights into fire safety risks and solutions as they pertain to the mining industry.

Read more...
Cybersecurity in mining
Technews Publishing Mining (Industry)
One does not usually associate mining with cybersecurity, but as big technology users (including some legacy technology that was not designed for cyber risks), mines are at risk from cyber threats in several areas.

Read more...