The importance of traceable records

Issue 8 2021 Editor's Choice, Security Services & Risk Management

The topic of traceable records is very important to me. Perhaps it is because of a specific incident; I was the victim of fraud when a page with my signature for a specific document was used with a totally different document. I was able to prove that the document was not authentic and that my signature was fraudulently added to a document. But I was lucky as the page with my signature basically was a ‘blank cheque’.

Since then, I am very aware of the lack of traceable records in South Africa. Referring to records, I include digital records. It is very important to realise that such records can still be printed, uploaded, changed and used for various purposes such as performance assessments, job applications and supporting evidence in criminal and disciplinary cases. Some organisations and departments are still stuck on hard copies and most probably will be for some time.

This tendency is evident even in prominent organisations and departments. On my retirement, I had to embark on securing debit orders with my bank (a major bank group) that were previously coming straight off my salary. There, I was expected to sign a document with various pages while the page with my signature had no reference to the reason for my signature. The document did not even include the total number of pages for the specific document.

This naturally raises concerns on the level of fraud and corruption in South Africa. We are creating opportunities for fraud and corruption with records, forms and contract documents that are not traceable.

A few examples

Training records are very important in terms of being traceable as these records form the foundation of the person’s career. During the various recruitment drives in my career, it was very concerning to notice the lack of information on degrees, diplomas and certificates. Are these records traceable with absolute certainty to the trainee and training intervention? Will a record be available to certify – without doubt – who the person is that completed the specific qualification? Internal training records must include traceable information. Any name changes must be supported with records as previous training will be on record with a different name.

Training manuals need to be traceable to indicate for which period the specific training manual was effective. Any references in the training manual must be traceable for easy access and to ensure use of correct references.

Official correspondence needs to reflect on each page to which document or topic all the pages relate.

It is important that official directives, such as standard operating procedures, work instructions, health and safety directives, strategic plans and policies are traceable as these are regularly used, are often updated, often referred to, or become obsolete. Working instructions need to be uniquely identified to avoid any confusion.

Attendance registers need to include the topic of the meeting as well the date and venue on all pages. Often these records are part of disciplinary cases.

Forms without references and implementation date provide a question mark whether the form is the most recent or the correct form. If a form is traceable, it is very easy to ensure the correct form is completed and the reference can be used in other documents.

A certifiable and auditable chain

Supply chain processes and financial records are critical to have traceability for auditing purposes. Signatures on financial approvals for procurement, payments, contracts and services cannot be without traceability to ensure certainty on the purpose of the signatures. It is a good practise to utilise the serial numbers of items, such as equipment, as traceable information for payments, services and repairs. The serial number of equipment has a definite trail from the manufacturer, distributor, to the end user.

With legal records such as affidavits and wills, traceability is not negotiable. I believe a book can be written on the reasons that wills become invalid.

Another area where traceability is essential is with personnel records to avoid ghost workers and workers getting paid while not at the company anymore. Medical records can be secured with the patient details on all pages for traceability.

Certified copies of original documents need to include all references as on the original documents, even if outside the contents of the document as a footnote. Such an example is some matric certificates where it is often found that the document number is not included in the certified copy.

The purpose of witnesses’ signatures on documents and certification of documents must be taken seriously and done correctly. This exercise is not even done correctly by some of our legal practitioners.

Any corrections or changes on records and documents need to be done in such a manner that the original information is readable. With digital records the trail must be available on any changes.

Signing for traceability

Signatures must include date of the signature, especially where the record has more than one signature and there is more than one document with the same reference. The sequence of signatures as well as time frames is often a dispute in disciplinary hearings and even criminal matters.

Digital signatures and watermarks are effective, but require certain information once presented as part of legal records.

It is good to see many records and documents have barcodes, however, very seldom are the barcodes used to capture the information on systems and databases. Too often the information is manually captured, which leaves room for error. The majority of items are equipped with barcodes, which should be used as an available advantage and to ensure data integrity.

The advantages of traceable records

• Records relate to the purpose of the record.

• All the pages of documents are linked to the same document.

• Signatures are linked to the specific contents and purpose.

• Performance agreements are linked to specific standards and manuals.

• Records are not easily questioned on whether applicable or not.

• Uncertainty reduced in terms of which record/document is the most recent or active.

• Fraud and corruption reduced.

• A paper trail becomes an easy exercise when requested for criminal and disciplinary cases.

It is a mindset change, but once in place, management of any process or system is much easier and traceable records are the new normal. It leaves the following questions to be answered.

• How traceable are the records at your organisation to the signatures, contents, purpose and time frames?

• Was an audit performed to determine the level of compliance?

• When was the last audit performed? Does the process followed reduce opportunities for corruption and fraud?

If more organisations, departments and companies concentrate on the basics, such as traceable records, financial and time losses can be prevented.



Sonja de Klerk.

Sonja de Klerk retired from the SAPS Forensic Science Laboratory as a Brigadier. She provides expert advice on CCTV management to secure the images as evidence. She presents training courses on CCTV Management for the images to be presented in court, forensic evidence typical to expect as part of criminal activities, how to present expert testimony in court and the importance of traceable records. Her expertise is also available for independent and confidential audits or evaluations and consultation on traceability of the records of your organisation. She can be contacted at sonsdeklerk@gmail.com or +27 82 778 9249.


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Empower individuals to control their biometric data
Information Security Access Control & Identity Management Security Services & Risk Management
What if your biometrics, now embedded in devices, workplaces, and airports, promising seamless access and enhanced security, was your greatest vulnerability in a cyberattack? Cybercriminals are focusing on knowing where biometric data is stored.

Read more...
Strategies for combating insider threats
Information Security Security Services & Risk Management
In Africa, insider threats pose an increasingly significant risk to businesses, driven by economic uncertainty, labour disputes, and rapid digital transformation. These threats can arise from various sources, including disgruntled employees and compromised third-party service providers

Read more...
From the editor's desk: Interesting times
Technews Publishing News & Events
We certainly live in interesting times. From delaying the budget speech because the ANC doesn’t see any reason why VAT shouldn’t be increased by 2%, to crime fighters being set up and prosecuted in ...

Read more...
World-first safe K9 training for drug detection
Technews Publishing SMART Security Solutions Editor's Choice News & Events Security Services & Risk Management Government and Parastatal (Industry)
The Braveheart Bio-Dog Academy recently announced the results of its scientific research into training dogs to accurately detect drugs and explosives without harming either the dogs or their handlers.

Read more...
Nice launches DC Blue Astute garage door motor
Nice Group South Africa Technews Publishing News & Events Access Control & Identity Management Perimeter Security, Alarms & Intruder Detection
Nice Systems SA has launched the Nice DC Blue Astute, a garage door motor for the South African market featuring a pre-installed lithium-ion battery instead of traditional lead-acid batteries.

Read more...
The need for integrated control room displays
Leaderware Editor's Choice Surveillance Training & Education
Display walls provide a coordinated perspective that facilitates the ongoing feel for situations, assists in the coordination of resources to deal with the situation, and facilitates follow up by response personnel.

Read more...
Cyber top business risk as climate change hits record high
Editor's Choice
Globally, companies identify cyberattacks, particularly data breaches, as their primary business concern for the coming year, with business interruption ranked second. In Africa and the Middle East, cyber incidents, shifts in legislation and regulation, and macroeconomic developments are the three foremost business risks.

Read more...
As technology converges, so does cybercrime
Editor's Choice
Cybercrime is no longer siloed: it involves complex collaborations and coordination between different malicious entities, including state actors, organised crime and even drug and human trafficking networks.

Read more...
The need for integrated control room displays
Editor's Choice Surveillance Training & Education
Display walls provide a coordinated perspective that facilitates the ongoing feel for situations, assists in the coordination of resources to deal with the situation, and facilitates follow up by response personnel.

Read more...
New firearms training modules from ITA
News & Events Security Services & Risk Management
The International Firearm Training Academy has launched two new firearms training modules to support career development in the firearms industry: the Maintenance Fitter and the Firearms Custodian modules.

Read more...