Requirements and Specification
For any significant system,software and the surrounding (human) environment, there must be a statement of requirements, prepared by the potential users before commencement,and a specification, the implementers' commitment as to what they will produce. Either of both of these may be updated as the work of implemetation progresses.
The statement of requirements should address questions such as the levels of security required,ease of extractability of information fields, and much much more,
without reference to specific details of implementation, since these are within the competence of the implementers, not that of the potential users.
What we need to see is is the statement of requirements and the statement as to the extent to which these have been met, but not how, in the implementation.
Such an examination will clearly reveal the level of human responsibility.
For example, if there is no adequate statement od requirements.....!!