home/glossary/Audit trail

Audit trail

nounid 1586·updated May 12, 2026
candidate

A chronological record that reconstructs and examines the sequence of activities surrounding or leading to a specific operation, procedure, or event in a security relevant transaction from inception to final result.

polysemousMWE

Classifications

Entity Type

Artifact0%rule-basedmulti_axis_classifier_low_confidence.v1

Sensitivity

Regulated85%llm-generatedllm:claude-haiku-4-5

Information Class

60%llm-generatedllm:claude-haiku-4-5

Variants

synonym
accounting of disclosures
plural
Audit trails
possessive
Audit trail's
pluralpossessive
Audit trails'

Framework definitions

ISACA Cybersecurity Glossary1 senseview framework →
§1
A visible trail of evidence enabling one to trace information contained in statements or reports back to the original input source
FFIEC IT Examination Handbook - Audit, April 20121 senseview framework →
§1
This record contains chronological records that enables one to trace information back to the original input source, who changed what and when for accountability, allowing for the reconstruction and examination of the sequence of activities surrounding or leading to specific operations, procedures, or events in a security relevant transaction from inception to final result, including source documents, electronic logs, and records of access to restricted files.
NY DFS Part 500 (NYCRR Title 23, Chapter 1, Part 500)1 senseview framework →
§1
This record contains chronological records that enables one to trace information back to the original input source, who changed what and when for accountability, allowing for the reconstruction and examination of the sequence of activities surrounding or leading to specific operations, procedures, or events in a security relevant transaction from inception to final result, including source documents, electronic logs, and records of access to restricted files.
NISTIR 7298: Glossary of Key Information Security Terms, Revision 22 sensesview framework →
§1
A record showing who has accessed an Information Technology (IT) system and what operations the user has performed during a given period.
§2 · sense_2_pending_review
A chronological record that reconstructs and examines the sequence of activities surrounding or leading to a specific operation, procedure, or event in a security relevant transaction from inception to final result.
CNSSI-4009 (Glossary of Information Assurance Terms)1 senseview framework →
§1
A chronological record that reconstructs and examines the sequence of activities surrounding or leading to a specific operation, procedure, or event in a security relevant transaction from inception to final result.
NIST SP 800-471 senseview framework →
§1
A record showing who has accessed an Information Technology (IT) system and what operations the user has performed during a given period.

Outgoing relationships

No outgoing triples
This term is not the subject of any RDF-style relationship yet.

Incoming relationships

No incoming triples
No other term currently asserts a relationship to this one.