Turning Audit Trails into Accountability

Public finance reformers often equate successful digitalization with stronger control. That assumption is broadly valid, but incomplete. Indonesia’s experience with SPAN and SAKTI shows why. 

SPAN operates as Indonesia’s central treasury system ("PMK 154/2014," 2014). SAKTI supports agency-level financial processes, from budgeting to accounting and reporting ("PMK 171/2021," 2021). Together, they form an integrated financial management information system. SPAN and SKTI have strengthened budget execution through rule-based validation, restricted access, segregation of duties, and audit trails ("PMK 154/2014," 2014; "PMK 171/2021," 2021). A qualitative study of fourteen treasury officials found that these controls link actions to users, time, and approval points. The result is stronger traceability, not risk elimination.

The Indonesian case confirms that digital controls can narrow procedural discretion. Budget ceilings become hard limits. Fund-availability checks prevent overcommitment. Approval stages separate operators, validators, and approvers. Audit trails make later denial more difficult. These features directly support concerns such as predictability and control in budget execution, accounting and reporting, and external scrutiny (PEFA Secretariat, 2019). 

The policy lesson is sharper. Strong digital controls can shift risk rather than remove it. Residual risks remain in user behaviour, access governance, timing gaps, and exception handling. The study identified procedural non-compliance, credential sharing, weak process literacy, data refresh latency, problems with revision-execution timing, and workarounds under operational pressure.

This matters because audit trails are not inherently accountable. A log records an action, but it does not ask questions. A timestamp creates evidence, but it does not trigger follow-up. A user identity supports answerability, but enforcement still requires institutional routines. Digital records become accountable only when managers, supervisors, and auditors review them systematically.

Indonesia’s experience suggests that countries should focus the next stage of IFMIS reforms on active use. Many systems already capture rich transaction data. The priority is to define which patterns deserve review. Examples include repeated corrections, unusual access times, dormant account reactivation, role conflicts, frequent returns, and transactions processed close to budget revisions. Risk-based audit trail review can turn stored evidence into early warning signals.

Access governance should receive equal attention. Role-based access works only when user rights remain aligned with actual duties. Periodic access recertification should verify active users, dormant accounts, conflicting roles, and high-risk permissions. This is not a narrow IT task. It protects the evidentiary value of audit trails. A log loses credibility when the named user is not the real user.

Process literacy is another reform frontier. Users may know which menu to select without understanding the underlying fiscal logic. Scenario-based training can address this gap. Training should cover budget revision, commitment control, payment validation, returns, voids, asset recording, and audit trail responsibility. The study found that weak process understanding can produce suspended transactions, repeated corrections, and avoidable coordination costs.

Data lineage also deserves greater prominence. Integrated systems do not always refresh every dashboard at the same moment. Monitoring tools should display data sources, refresh times, cut-off points, and transformation rules. Clear metadata can prevent unnecessary disputes over figures. It can also help supervisors distinguish real errors from timing differences.

Transparency must also be understood carefully. IFMIS strengthen internal visibility by enabling authorized actors to trace transactions and monitor their status. Public transparency requires a different design. Sensitive fiscal data needs classification, aggregation, and context. More data does not automatically produce better accountability. Useful transparency depends on information that is timely, understandable, and safe to disclose.

The broader PFM implication is clear. IFMIS reforms should not end at system deployment. Maturity should be assessed by how digital evidence is used after implementation. A good system records transactions. A stronger system helps institutions detect, interpret, and correct risk.

Indonesia’s experience offers a practical lesson for other countries. Digital controls can make deviation harder. Active governance makes residual risk visible. Risk-based audit trail review, access recertification, scenario-based training, exception protocols, and clear data lineage can help governments move from digital control to fiscal accountability.

References

Diamond, J., & Khemani, P. (2006). Introducing Financial Management Information Systems in Developing Countries. OECD Journal on Budgeting, 5(3), 97-124. 

Peraturan Menteri Keuangan Republik Indonesia Nomor 154/PMK.05/2014 tentang Pelaksanaan Sistem Perbendaharaan dan Anggaran Negara, 154 Berita Negara Republik Indonesia Tahun 2014 Nomor 1062 (2014). https://jdih.kemenkeu.go.id/

Peraturan Menteri Keuangan Republik Indonesia Nomor 171/PMK.05/2021 tentang Pelaksanaan Sistem SAKTI, PMK.05 Berita Negara Republik Indonesia Tahun 2021 Nomor 1307 (2021). https://jdih.kemenkeu.go.id/

Secretariat, P. (2019). Framework for Assessing Public Financial Management (Second Edition ed.). PEFA Secretariat. www.pefa.org