Why are logs and audit trails important in security systems?

• A. For accountability, investigations, and trend analysis.
• B. They help with marketing of security services.
• C. To replace the need for human oversight.
• D. To improve visual aesthetics of the security room.

Answer: (B)

Logs and audit trails matter because they provide a clear, verifiable record of what happened in the system, who did it, and when. This creates accountability—so you can answer questions like who accessed a resource and what actions they took. They also support investigations by giving investigators concrete evidence to reconstruct incidents and determine the sequence of events. In addition, logs enable trend analysis: by examining data over time, you can spot unusual patterns, detect potential breaches, assess risk, and improve security controls. For logs to be useful, they should be protected from tampering, have accurate timestamps, be collected in a centralized place, and be retained for an appropriate period. Marketing, replacing human oversight, or merely improving aesthetics don’t address these fundamental security needs.