CISSP: Certified Information Systems Security Professional

Audit capability depends foremost on audit records containing sufficient, relevant information to identify events, users, actions, times, and outcomes for effective monitoring and investigation. Storage allocation and audit-failure procedures support the audit function but do not establish whether the records themselves are useful.