Audit Trail

Definition

A chronological record of system activities, transactions, or document changes that provides a verifiable history of who did what, when, and why. Audit trails are essential for regulatory compliance, fraud detection, and internal controls, and are required by standards including SOX, GDPR, and ISO 27001.

Complementary Terms

Concepts that frequently appear alongside Audit Trail in practice.

Intellectual Property Audit

A systematic review of a company's intellectual property portfolio — including patents, trademarks, copyrights, trade secrets, domain names, and licences — to assess ownership, validity, enforceability, freedom to operate, and commercial relevance. IP audits are essential in M&A due diligence, technology licensing negotiations, and litigation preparation.

SOX Compliance

Adherence to the requirements of the Sarbanes-Oxley Act of 2002 (SOX), US federal legislation mandating rigorous financial reporting, internal controls, and audit standards for publicly traded companies. SOX Section 302 requires CEO/CFO certification of financial statements, while Section 404 mandates annual assessment of internal controls over financial reporting.

Internal Controls

The policies, procedures, and mechanisms established by an organisation to ensure the reliability of financial reporting, effectiveness of operations, and compliance with applicable laws and regulations. The COSO framework provides the most widely adopted internal controls standard, defining five components: control environment, risk assessment, control activities, information and communication, and monitoring.

Data Protection Impact Assessment

A structured process required under GDPR Article 35 to identify, assess, and mitigate privacy risks arising from data processing activities that are likely to result in high risk to individuals. DPIAs are mandatory before deploying new technologies, large-scale profiling, or processing sensitive personal data, and must document the necessity, proportionality, and safeguards of the proposed processing.

Machine Learning Model

A mathematical model trained on data to identify patterns and make predictions without being explicitly programmed for each task. Machine learning models underpin many AI-driven business applications, from demand forecasting to fraud detection, and their development costs are increasingly recognised as intangible assets under IAS 38 when they meet the identifiability and future economic benefit criteria.

Medical Device Classification

The regulatory categorisation system that assigns medical devices to classes based on their risk to patients, which determines the level of regulatory scrutiny required for market approval. The EU MDR uses four classes (I, IIa, IIb, III) while the FDA uses three (I, II, III).

Reporting Accountant

A reporting accountant is the independent accounting firm a company appoints to report on its financial information and financial procedures during an IPO. The role is distinct from the statutory audit.

Value Drivers Register

The formal, auditable record of the intangible assets a business owns, with each asset individually named, described and classified against the Opagio 12 intangible value drivers. It is the output of Guided Asset Discovery, the first step of The Opagio Method, and it exists because the accounting standards leave most intangible value undocumented: IAS 38 and FRS 102 Section 18 prohibit recognising internally generated intangibles on the balance sheet, so brand, software, customer relationships, data and know-how built in-house appear nowhere in the filed accounts.

Further Reading

Put this knowledge to work

Use Opagio's free tools to measure and grow the intangible assets that drive your business value.