You're required by to set up systems to ensure accounting information can not be tampered with, even if people tampering with accounting information isn't considered to be a high risk. To make it more concrete, it means you can't push to master any more in a git repository to fix some botched merge because, it happens to deal with revenue in some tiny corner of it's functionality and every change has to be approved by multiple people