What is the role of logs in proving time-bound compliance during audits?

• A. Logs are optional in audits.
• B. Timestamps are derived from memory.
• C. Logs provide verifiable timestamps for actions; essential as audit evidence.
• D. Logs are only used for system maintenance.

Answer: (D)

In audits that verify time-bound compliance, logs serve as the trustworthy record of events. They capture who did what and exactly when, using synchronized clocks to produce verifiable timestamps. This makes it possible to prove that actions occurred within required time windows, or to reveal gaps where deadlines weren’t met. Logs also support non-repudiation and provide a clear chain of evidence that auditors can review. They aren’t optional, and relying on memory isn’t acceptable for proving timing. While logs can aid maintenance, their essential role in audits is to provide auditable timing data and traceability that substantiates compliance with time-based requirements.