If you want to check whether the organizations illegally use API to manipulate the data, the best way is to check if they have purchase any API Management Tool from account department.
You can perform IT Audit to the API system but don't trust on the western big audit firms.
Comments