some situations, organizations may have to carry out direct updates to a database. For example, if, due to a systems outage, the transactions could not be processed in real time for a few days, it is not practical to insist that once the system availability is restored, the backlog should be entered through the application (front end) before the transactions of the subsequent days are entered or processed.
In such cases, management may decide to catch up on the backlog by directly updating the transactions in the database (back end).
An IS auditor should ensure that . The important point to remember is that, in any organization,
there are controls in place to ensure that such direct back-end data fixes are SUPPORTED BY AUTHORIZATION of the business for completeness and accuracy
-