"The mere fact that event data appear on a prenumbered document is no proof of the validity of the event. Someone intent on defrauding a system, by introducing a fictitious event, probably would be clever enough to get access to the prenumbered documents or would replicate those documents so as to make the event appear genuine."
a. Assume for a moment that the comment is true. Present (and explain) a "statement of relationship" between the intended control plan of using prenumbered documents and the information process control goal of event "validity."
b. Do you agree with this comment? Why or why not?