The XYZ company operates a large Web-based retail shoe business. All sales orders are entered by the customer into a secure server. Only credit card orders are accepted, and the verification is immediate so that bad debts are impossible. But there are some cases of chargebacks due to customers' use of fraudulent credit card numbers.

After orders are accepted by the system, the Web server sends the order details to the accounting database server, which in turn causes the relevant accounts to be updated.

Required

(a) You have been assigned the job of designing an internal audit review for the entire Web-based sales order system. Describe what steps you would take to complete your work.