Design and Implementation of a Web-Based It-Enabled Internal Control System Using Role-Based Access Control and Digital Audit Trails

Internal control systems are essential for ensuring organizational accountability, operational transparency, fraud prevention, and financial reliability. Traditional manual control systems are often associated with delayed reporting, poor monitoring capabilities, weak authorization procedures, and increased vulnerability to fraud and operational errors. This study presents the design and implementation of a web-based IT-enabled internal control system using role-based access control (RBAC) and digital audit trails. The developed system automates transaction monitoring, authorization validation, activity logging, and operational reporting within organizational environments. The system was implemented using Python and Flask as the backend framework, PostgreSQL as the relational database management system, and cloud deployment technologies for centralized access. Core security features such as user authentication, authorization enforcement, transaction validation, and audit logging were integrated into the application. Performance evaluation was conducted using transaction simulations, unauthorized access tests, and audit verification procedures. Experimental results showed that the system successfully enforced authorization rules, generated complete audit trails, and improved transaction monitoring efficiency. The developed framework demonstrates how information technology can strengthen organizational governance, improve operational transparency, and support continuous monitoring within modern organizations.