What is the purpose of a security log or diary?

• A. To track inventory
• B. To record all events, actions, and decisions for accountability and legal protection
• C. To schedule shifts
• D. To store confidential data only

Answer: (B)

Security logs capture what happens during security operations in a clear, chronological way, recording events, actions, and decisions. The main purpose is accountability and legal protection: the log provides a verifiable trail that shows what occurred, who was responsible for each action, when it happened, and why certain decisions were made. This trace is essential for investigations, resolving disputes, auditing, training, and demonstrating compliance with policies and procedures. To be effective, entries should be precise and timely, noting date and time, location, people involved, a factual description of the incident or activity, actions taken, outcomes, and the person making the entry, with secure storage to preserve integrity. While logs may include confidential information as needed, the core idea is to create a reliable record of events for accountability and potential legal use, not merely to store data or manage schedules.