Accounting

Identity · Beginner

Recording what an identity did, and when, so actions can be traced, audited, and investigated later.

It is the audit trail. Logs of logins, file access, and administrative commands let a team reconstruct an event instead of guessing.

Example: A log shows which administrator changed a firewall rule at 14:06. That record is accounting.

Common misconception

This is not the finance department. In access control it means an audit record of activity.