Observability as Audit Evidence
Mid-investigation, someone asked for the transfer logs from eleven weeks ago—the ones that would show exactly what happened to run R. The retention policy was thirty days. The logs that could have answered the question had been rotated into nothing, and the finding closed as “probable, not demonstrable.”
Read More