📜
Audit Log
Data Management
Tamper-evident record of security/privacy-relevant events used for accountability and investigations.
Definition
Audit logs capture security- and privacy-relevant events: logins, permission changes, data exports, and admin actions. They should be protected against tampering and retained per policy.
In plain English
Tamper-evident record of security/privacy-relevant events used for accountability and investigations.
Why this matters
Why it matters: Without audit trails, it’s hard to prove what happened or to detect unauthorized access.
Example
Example: Store audit logs append-only, restrict access, monitor for anomalies, and include actor, action, target, and timestamp.