“The mere fact that event data appear on a pre-numbered document is no proof of the validity of the event. Someone intent on defrauding a system by introducing a fictitious event probably would be clever enough to get access to the pre-numbered documents or would replicate those documents to make the event appear genuine.”

a.Do you agree with this comment? Why or why not?

b.Without prejudice to your answer to part (a), assume that the comment is true. Present (and explain) a “statement of relationship” between the control plan of using pre-numbered documents and the information system control goal of event “validity.”