Maintaining an accurate audit trail allows for teams to accomplish several things including maintaining individual and vendor accountability, reconstruct previous events, detect intrusions, and perform problem analysis. A thorough audit trails allows team to start asking important questions like:
“Where in the assessment did a vendor communicate warning signs of a potential incident?”
“How could we have known?”
“What is the risk trend of our vendor population? Is it going up? or down?”
Historical performance records are also very useful for transparency. Maintaining an accurate record of system, user and and assessment activity over time will allow for greater transparency between vendors and corporations.