Tamper-resistant recording of security-relevant events for monitoring, investigation, and evidence.
Audit logging is the recording of security-relevant events — authentication, authorisation, privileged actions, configuration changes, data access — in a tamper-resistant, time-synchronised store retained for an appropriate period (typically 1 year hot, 7 years cold for regulated industries).
Run a free ComplianceIQ audit against SOC 2 and we'll surface every gap on this — and the other controls auditors flag — with the exact clause references to fix.