Certified in Risk and Information Systems Control (CRISC) — Question 588

Which of the following is MOST important to the integrity of a security log?

Answer options

• A. Least privilege access
• B. Encryption
• C. Inability to edit
• D. Ability to overwrite

Correct answer: C

Explanation

The inability to edit a security log is essential for ensuring that the log remains a trustworthy record of events. If logs can be modified, their integrity could be compromised, leading to potential security breaches. Options A and B, while important for overall security, do not directly relate to the integrity of the log itself, and option D undermines log integrity by allowing changes.