Electronic records access rights

One of the key controls for audit trails is the linking of the electronic record with the audit trail. It must not be possible to modify audit trails access rights to audit trial information must be limited to print and/or read only. The combination of authentication, digital certificates, encryption and ACLs, provides the technical mechanisms needed to control the access to audit trail files. 

The firm did not have a system administrator who was responsible for system configuration and control of access to configuration tools that can modify or delete electronic records. System administrator permissions and rights were given to some QC analysts who were also responsible for analyzing samples. 

---