← CIS Controls v8 in plain English

8.5 IG2

Control 8 / Audit Log Management

Collect Detailed Audit Logs

Think of it likeUpgrading the household journal from someone opened the safe to Dad opened the safe at 9pm using the spare code.

In plain English

Logs capture the fine detail (which user, which device, source, timestamp) needed to actually reconstruct events, not just that something occurred.

Related CSF subcategories (unofficial mapping)