For an audit-friendly record, which elements should be monitored?

For an audit-friendly record, which elements should be monitored?

• A. Appointment dates only
• B. Marketing preferences
• C. User actions and access timestamps
• D. Device color and battery level

Answer: (C)

Capturing who did what and when creates an auditable trail that supports accountability, security, and regulatory compliance. Monitoring user actions and access timestamps provides a complete record of each interaction with sensitive data, including the identity of the person, the action taken, and the exact time it occurred. This makes it possible to reconstruct events, investigate any anomalies, and verify that access controls and data changes followed policy. Appointment dates alone show scheduling information but don’t establish who accessed or modified records, or when those actions happened. Marketing preferences relate to consent or preferences but don’t capture the activity history necessary for audits. Device color and battery level are technical details that don’t reflect user activity or data access, so they don’t support an auditable record.

Capturing who did what and when creates an auditable trail that supports accountability, security, and regulatory compliance. Monitoring user actions and access timestamps provides a complete record of each interaction with sensitive data, including the identity of the person, the action taken, and the exact time it occurred. This makes it possible to reconstruct events, investigate any anomalies, and verify that access controls and data changes followed policy.

Appointment dates alone show scheduling information but don’t establish who accessed or modified records, or when those actions happened. Marketing preferences relate to consent or preferences but don’t capture the activity history necessary for audits. Device color and battery level are technical details that don’t reflect user activity or data access, so they don’t support an auditable record.