Auditability
On This Lesson 4 topics
This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.
In this lesson
make changes and access traceable and tamper-resistant.
Planned topics
- Audit log: who did what, to which data, when, from where, and the outcome.
- Make logs append-only and protected from the people being audited.
- Trace changes through deployment and configuration, not only data access.
- Balance: logs themselves must not leak personal data; retain them as long as required.
Draft outline details
Demonstration
an audit event schema with actor, action, subject, time, source, result, and request id, written to append-only storage with restricted read access.
Check your understanding
Why protect audit logs from the people being audited?
Show answer
Otherwise records could be altered or deleted, defeating their purpose.
Practice
Apply this lesson with the module's lab, exercises and quiz.
Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.