ABSTRACT
We have to dig deeper in the “why” of auditing and logging. We have outlined the need for it at a very high level, and know from “best practices” that it is a requirement in any EDP environment, but can you today in one sentence answer the question, “Why do we do audit logging?” Everyone today in an EDP position has oversight groups, committees, or industry-specific organizations, all of which have rules and regulations as to how the business is run, what models work for them, and what degrees of “compliance” are required. In this section we try to evaluate at a high level what these requirements are, why they are drivers to what we are trying to accomplish in the form of audit logging, and how this consolidation approach can help you to both meet these requirements and provide a value to the business.
