top of page

H03

Observability & Audit

Logs are immutable, cryptographically signed, and retained for a period defined by tier.

WHAT IT ADDRESSES

Log tampering by a compromised agent; evidence expiring before it is needed.

VERIFICATION METHOD

Immutability and retention configuration review.

OWASP T&M

bottom of page