Which statement about time data protection is correct?

Which statement about time data protection is correct?

• A. Time data protection is optional during audits.
• B. Time data protection is irrelevant to event logs.
• C. Time data must be protected.
• D. Time data should be publicly accessible to auditors.

Answer: (C)

Time data in security logs acts as the chronological backbone of the audit trail. Accurate timestamps are essential for correlating events, establishing when actions occurred, and supporting investigations and compliance reviews. If time data is not protected, timestamps can be altered, logs tampered with, or sequences misrepresented, which undermines accountability and makes incident response far harder. Therefore, time data must be protected through appropriate controls: restrict access to authorized personnel, protect logs both at rest and in transit, and implement integrity measures (such as hashes or digital signatures) to detect any modification. Proper time synchronization (for consistent timestamps) is also important. Time data should not be publicly accessible, but available to auditors with proper authorization. Given these points, the statement that time data must be protected is the correct one.

Time data in security logs acts as the chronological backbone of the audit trail. Accurate timestamps are essential for correlating events, establishing when actions occurred, and supporting investigations and compliance reviews. If time data is not protected, timestamps can be altered, logs tampered with, or sequences misrepresented, which undermines accountability and makes incident response far harder. Therefore, time data must be protected through appropriate controls: restrict access to authorized personnel, protect logs both at rest and in transit, and implement integrity measures (such as hashes or digital signatures) to detect any modification. Proper time synchronization (for consistent timestamps) is also important. Time data should not be publicly accessible, but available to auditors with proper authorization. Given these points, the statement that time data must be protected is the correct one.