I.0412Indicator
Fails to maintain adequate audit trails for sensitive data access
No logging of sensitive data access, so misuse or loss can't be traced to who accessed it.
Classification
- Risk domain One of 9 areas of human risk, from social engineering to readiness and response. Every signal belongs to one.
- Category
- Subject Who or what a signal is about: person, AI agent, vendor and organization.
- Evidence level
- Maturity practices One capability a program performs, scored on its own: See, Understand, Act, Prove, Govern and Culture.
- Mappings
-
Indicators carry no mappings of their own; the signals in the same risk domain do.
Related signals (same domain, dimension and polarity)
4Cite this term
"Fails to maintain adequate audit trails for sensitive data access" (I.0412), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/indicators/i-0412-fails-to-maintain-adequate-audit-trails-for-sensitive-data-access
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.