Formal Change Procedures - Must not use backend change approaches
For every change in a transaction a customer or a supplier must authorize the changes using a formal change request. An adjustment is entered and documented with all record retention requirements.
Backend changes are failures in any audit for internal and a risk for mitigation in external audits.