Strengthening Regulatory Compliance Through Audit Logs: A Study of Nigerian SMES Financial Reporting
Abstract
Regulatory compliance remains a critical challenge for Small and Medium Enterprises in Nigeria, where weak internal controls, manual record-keeping, and limited technological capacity contribute to inaccurate financial reporting and frequent penalties from the Federal Inland Revenue Service and Corporate Affairs Commission. Audit logs, which record user activity within information systems, offer a mechanism to enhance data integrity, accountability, and traceability. However, empirical evidence on how audit log implementation influences compliance among Nigerian SMEs is limited. This study addresses this gap by examining the effect of audit log implementation on regulatory compliance, with organizational IT maturity as a moderator and defensible records retention as a mediator. The study is anchored on Accountability Theory, Information Integrity Theory, and Records Lifecycle Theory. A convergent parallel mixed-methods design was adopted. Quantitative data were collected from 382 SMEs across Lagos, Abuja, Kano, and Port Harcourt using a structured questionnaire measuring audit log implementation, IT maturity, records retention, and regulatory compliance. Qualitative data were obtained from 15 finance, IT, and compliance officers through semi-structured interviews. Quantitative data were analyzed using multiple regression, moderated regression, and PROCESS Macro Model 4 in SPSS v27, while qualitative data were analyzed through thematic analysis in NVivo 14. Findings indicate that audit log implementation has a significant positive effect on regulatory compliance among Nigerian SMEs [β = 0.612, p < 0.001], explaining 37.4% of the variance. The results also show that IT maturity significantly moderates this relationship [β = 0.189, p < 0.001], suggesting that SMEs with higher levels of IT infrastructure, data management practices, and technical skills benefit more from audit logs. Furthermore, audit log implementation significantly improves defensible records retention and purging decisions, both directly and indirectly, with a significant indirect effect [β = 0.186, 95% CI: 0.115, 0.267]. Qualitative findings corroborate these results, highlighting that audit logs provide verifiable evidence during tax audits and fraud investigations. However, challenges such as high implementation costs, inadequate staff training, and unclear JAFM JAFM regulatory guidance on retention periods constrain effective adoption. The study concludes that audit logs are effective tools for strengthening regulatory compliance, but their impact is contingent on organizational IT readiness and supportive regulatory frameworks. The findings contribute to theory by extending Accountability and Records Lifecycle Theories to the SME context in developing economies. Methodologically, the study demonstrates the value of mixed- methods approaches in examining technology-driven compliance practices. The study recommends that SMEs invest in systems with robust audit log capabilities, that regulatory bodies provide clear retention guidelines and minimum technical standards, and that government and development partners support IT capacity-building initiatives for SMEs. Future research should adopt longitudinal designs and explore the role of emerging technologies such as blockchain and cloud-based audit trails in enhancing compliance.
References
Adewale, T. O., & Bello, K. A. (2022). Audit trails and internal fraud prevention in Nigerian SMEs. Journal of Small Business and Entrepreneurship, 34(2), 145–162. Adewumi, S. A., & Salami, R. O. (2022). Audit logs and cybersecurity incident response in small enterprises. African Journal of Information Systems, 14(1), 78–95. Adeyemi, L. A., & Musa, A. B. (2020). Regulatory compliance and audit trails: Evidence from Nigerian SMEs. Journal of Accounting and Taxation, 12(3), 88–102. Babatunde, M. A., & Lawal, F. K. (2020). Financial transparency and credit access among Nigerian SMEs. International Journal of Banking and Finance, 16(2), 201–218. Bearman, D. (1994). Documenting the documentation: The role of recordkeeping in accountability. Archives and Museum Informatics. Chinedu, E. O., & Akpan, U. J. (2022). Cloud accounting adoption and audit readiness in Nigerian SMEs. Journal of Information Technology Management, 33(1), 55–71. Chukwu, G. O., & Lawal, S. M. (2022). Audit trails and growth performance of SMEs in Nigeria. African Journal of Business Management, 16(4), 112–128. Chukwu, G. O., & Nwosu, P. C. (2021). Accounting information systems and financial reporting accuracy in South-East Nigeria. Journal of Accounting Research, 19(2), 67–84. Committee of Sponsoring Organizations of the Treadway Commission. (2013). Internal control— Integrated framework. COSO. Creswell, J. W., & Creswell, J. D. (2018). Research design: Qualitative, quantitative, and mixed methods approaches (5th ed.). SAGE Publications. Davis, F. D. (1989). Perceived usefulness, perceived ease of use, and user acceptance of information technology. MIS Quarterly, 13(3), 319–340. Deloitte. (2021). The future of audit: Digital transformation and audit innovation. Deloitte Insights. DiMaggio, P. J., & Powell, W. W. (1983). The iron cage revisited: Institutional isomorphism and collective rationality in organizational fields. American Sociological Review, 48(2), 147– 160. Emeka, C. N., & Onwuka, I. O. (2021). Monitoring mechanisms and employee accountability in SMEs. Journal of Organizational Behavior, 42(3), 301–318. Field, A. (2018). Discovering statistics using IBM SPSS Statistics (5th ed.). SAGE Publications. Grant, C., & Osanloo, A. (2014). Understanding, selecting, and integrating a theoretical framework in dissertation research: Creating the blueprint for your 'house.' Administrative Issues Journal, 4(2), 12–26. https://doi.org/10.5929/2014.4.2.9 Hassan, M. A., & Garba, I. S. (2021). Data protection compliance and audit logs in Nigerian SMEs. Journal of Data Protection and Privacy, 4(2), 134–150. Hair, J. F., Black, W. C., Babin, B. J., & Anderson, R. E. (2019). Multivariate data analysis (8th ed.). Cengage Learning. Hayes, A. F. (2018). Introduction to mediation, moderation, and conditional process analysis: A regression-based approach (2nd ed.). Guilford Press. Ibrahim, A. S., & Musa, B. L. (2021). Automated accounting systems and reporting timeliness among Nigerian SMEs. Journal of Small Business Management, 59(4), 701–718. Ibrahim, A. S., & Ojo, T. A. (2021). Barriers to audit log adoption in small enterprises. Journal of Change Management, 21(2), 201–217. Imenda, S. (2014). Is there a conceptual difference between theoretical and conceptual frameworks? Journal of Social Sciences, 38(2), 185– 195. https://doi.org/10.1080/09718923.2014.11893249 JAFM JAFM International Auditing and Assurance Standards Board. (2020). International Standard on Auditing 500: Audit evidence. IAASB. International Organization for Standardization. (2016). ISO 15489-1:2016 Information and documentation — Records management — Part 1: Concepts and principles. ISO. Jensen, M. C., & Meckling, W. H. (1976). Theory of the firm: Managerial behavior, agency costs and ownership structure. Journal of Financial Economics, 3(4), 305–360. Merchant, K. A., & Van der Stede, W. A. (2017). Management control systems: Performance measurement, evaluation and incentives (4th ed.). Pearson. Musa, A. B., & Danladi, S. M. (2020). Audit trails and external audit efficiency in Nigerian SMEs. International Journal of Auditing, 24(3), 301–315. Nigeria Data Protection Bureau. (2021). Nigeria Data Protection Regulation 2019: Implementation framework. NDPB. Nneka, C. O., & Obi, F. E. (2022). Compensating controls in small firms: The role of audit logs. Journal of Accounting and Organizational Change, 18(1), 45–62. Nwachukwu, J. O., & Adebayo, R. S. (2021). Stakeholder trust and financial transparency in Nigerian SMEs. Journal of Business Ethics, 168(2), 321–337. Okon, E. A., & Yusuf, M. L. (2020). Error detection and accounting systems in Nigerian retail SMEs. Journal of Accounting Education, 38(1), 89–104. Okoro, C. N., & Eze, P. U. (2022). Audit logs and tax audit outcomes in Nigeria. Journal of Tax Administration, 8(1), 55–72. Okpala, K. E. (2019). Internal control systems and financial performance of small and medium enterprises in Nigeria. International Journal of Business and Management, 14(6), 145–156. Onoh, J. O., & Nkama, C. O. (2016). Forensic Accounting and Board Performance in the Nigerian Banking Industry”, , ISSN 2504-8856 , www.iiardpub.org Otley, D. T. (1980). The contingency theory of management accounting: Achievement and prognosis. Accounting, Organizations and Society, 5(4), 413–428. Owolabi, S. A., & Ogunleye, J. O. (2021). Adoption of accounting information systems and financial reporting quality among SMEs in Lagos State, Nigeria. Journal of Accounting and Financial Management, 7(2), 45–62. Rogers, E. M. (2003). Diffusion of innovations (5th ed.). Free Press. Rogers, R. W. (1975). A protection motivation theory of fear appeals and attitude change. Journal of Psychology, 91(1), 93–114. Small and Medium Enterprises Development Agency of Nigeria. (2022). SME National Survey Report. SMEDAN. Spence, M. (1973). Job market signaling. Quarterly Journal of Economics, 87(3), 355–374. Suchman, M. C. (1995). Managing legitimacy: Strategic and institutional approaches. Academy of Management Review, 20(3), 571–610. Sule, M. A., & Idris, A. B. (2021). Audit log dashboards and managerial decision quality in SMEs. Journal of Management Information Systems, 38(2), 401–420. Teece, D. J., Pisano, G., & Shuen, A. (1997). Dynamic capabilities and strategic management. Strategic Management Journal, 18(7), 509–533. Tetlock, P. E. (1992). The impact of accountability on judgment and choice: Toward a social contingency model. Advances in Experimental Social Psychology, 25, 331– 376. https://doi.org/10.1016/S0065-2601(08)60287-7 JAFM JAFM Uche, I. O., & Okafor, C. N. (2022). Internal control deficiencies and audit trails in agricultural SMEs. Journal of Accounting and Finance, 22(1), 77–93. Venkatesh, V., Morris, M. G., Davis, G. B., & Davis, F. D. (2003). User acceptance of information technology: Toward a unified view. MIS Quarterly, 27(3), 425–478. von Bertalanffy, L. (1968). General system theory: Foundations, development, applications. George Braziller. Wang, R. Y., & Strong, D. M. (1996). Beyond accuracy: What data quality means to data consumers. Journal of Management Information Systems, 12(4), 5– 33. https://doi.org/10.1080/07421222.1996.11518099 Whitman, M. E., & Mattord, H. J. (2017). Principles of information security (6th ed.). Cengage Learning. Williamson, O. E. (1985). The economic institutions of capitalism. Free Press. Yusuf, A. B., & Bello, S. A. (2022). Earnings management and audit trails in Nigerian SMEs. Journal of Financial Reporting, 7(2), 112–129. JAFM JAFM Questionnaire on Strengthening Regulatory Compliance Through Audit Logs: A Study of Nigerian Small and Medium Enterprises Financial Reporting Instructions: This questionnaire is for academic research purposes only. All responses will be kept confidential. For Sections B to F, please tick one option that best reflects your opinion using the 5 point scale below: 1 = Strongly Disagree 2 = Disagree 3 = Neutral 4 = Agree 5 = Strongly Agree --- *Section A: Biodata* 1. What is your gender? [ ] Male [ ] Female [ ] Prefer not to say 2. What is your age group? [ ] 18 to 25 years [ ] 26 to 35 years [ ] 36 to 45 years [ ] 46 to 55 years [ ] 56 years and above 3. What is your highest level of education? [ ] Secondary School Certificate [ ] Ordinary National Diploma or National Diploma [ ] Higher National Diploma or Bachelor’s Degree [ ] Master’s Degree [ ] Doctorate Degree 4. What is your role in the organization? [ ] Owner or Managing Director [ ] Accountant or Finance Officer [ ] Internal Auditor [ ] Operations Manager [ ] Other 5. How many years has your organization been operating? [ ] Less than 2 years [ ] 2 to 5 years [ ] 6 to 10 years [ ] 11 to 15 years [ ] Above 15 years 6. In which sector does your organization operate? [ ] Manufacturing [ ] Trade and Commerce JAFM JAFM [ ] Services [ ] Agriculture [ ] Other --- *Section B: Audit Logs and Reliability of Financial Reporting* 7. The use of audit logs improves the accuracy of financial records in my organization. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 8. Audit logs help to detect errors and misstatements in financial reports. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 9. Audit logs make financial information more reliable for decision making. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 10. The presence of audit logs reduces the likelihood of fraudulent financial reporting. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 11. Audit logs provide a clear trail of transactions for verification purposes. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 12. My organization relies on audit logs to confirm the completeness of financial data. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 13. Audit logs improve the timeliness of financial reporting in my organization. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 14. The use of audit logs increases stakeholder confidence in our financial statements. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 15. Audit logs help in tracing changes made to financial records over time. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree --- *Section C: Audit Logs and Regulatory Compliance* 16. Audit logs support compliance with the Companies and Allied Matters Act requirements. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 17. Audit logs help my organization meet the standards of the Financial Reporting Council of Nigeria. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 18. The use of audit logs reduces the risk of penalties from regulatory authorities. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 19. Audit logs make it easier to prepare for external audits and inspections. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 20. Regulatory agencies expect small and medium enterprises to maintain proper audit logs. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 21. Audit logs provide evidence of compliance during tax audits by the Federal Inland Revenue Service. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 22. Maintaining audit logs improves the overall governance of my organization. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 23. Audit logs help in aligning financial reporting with national accounting standards. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree JAFM JAFM --- *Section D: Audit Logs, Information Security, and Risk Management* 24. Audit logs help to protect financial information from unauthorized access. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 25. Audit logs reduce the risk of data manipulation and tampering. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 26. The use of audit logs improves the detection of cybersecurity threats. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 27. Audit logs support the identification of internal control weaknesses. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 28. Audit logs contribute to safeguarding the financial assets of my organization. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 29. Audit logs make it easier to investigate suspicious financial transactions. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 30. The absence of audit logs increases the vulnerability of financial data to fraud. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 31. Audit logs enhance accountability among employees who handle financial records. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree --- *Section E: Audit Logs and Data Retention and Purging Decisions* 32. Audit logs provide useful information for determining which records should be retained. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 33. Audit logs help my organization comply with data retention laws and policies. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 34. Audit logs assist in identifying records that are safe to purge without legal risk. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 35. The use of audit logs reduces the risk of losing important financial information. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 36. Audit logs support effective data lifecycle management in my organization. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 37. Audit logs make it easier to respond to legal requests for financial records. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 38. Audit logs help in balancing data minimization with regulatory retention requirements. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 39. My organization has a clear policy on data retention based on audit log analysis. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree --- *Section F: Future Outlook* 40. I believe the use of audit logs will become mandatory for all small and medium enterprises in Nigeria. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 41. Investment in audit log technology will increase in Nigerian small and medium enterprises in the next five years. JAFM JAFM 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 42. Audit logs will play a greater role in improving transparency in small and medium enterprise financial reporting. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 43. Regulatory authorities will strengthen enforcement of audit log requirements for small and medium enterprises. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 44. Training on the use of audit logs should be made available to small and medium enterprise staff. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 45. Cloud based accounting systems with audit logs will be widely adopted by small and medium enterprises. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 46. Audit logs will help small and medium enterprises access credit and investment more easily. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 47. The cost of implementing audit log systems will become more affordable for small and medium enterprises. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 48. Government support is needed to promote the adoption of audit logs among small and medium enterprises. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 49. Audit logs will reduce the incidence of financial fraud in the small and medium enterprise sector. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree 50. I am willing to recommend the use of audit logs to other small and medium enterprise owners. 1 = Strongly Disagree | 2 = Disagree | 3 = Neutral | 4 = Agree | 5 = Strongly Agree
More Articles from JOURNAL OF ACCOUNTING AND FINANCIAL MANAGEMENT
Operational Resilience in Financial Services: An Integrated Risk, Control, and Analytics Framework
Author: Funmilayo Ashore-Onisemo, Uchechi Mary-Linda Unamma
Impact of Data Analytics Adoption on Audit Quality in the Public Sector Accounting Reporting
Author: Ikenna, Ogochukwu Eunice
Cashflow Management and the Performance of Commercial Banks in Nigeria
Author: Jeffrey Ayas Iyakonbogha, Clement E. Ozele
Artificial Intelligence-Driven Internal Control Systems and Cybercrime Prevention in Nigerian Deposit Money Banks
Author: Fasola Job Adedokun, Olojede Samson Olusola FCA
The Nigerian Code of Corporate Governance and Financial Performance of Deposit Money Banks in Nigeria
Author: i, Eneaniofu Daniel Mmaduakonam, ii, Azolike Nkiru Nkechi, iii, Emeter Patrick Okechukwu, iv, Okwor Emmanuel Ejimnkonye