Append-only records
No writer holds update or delete privilege on the Event log, so every Event is kept forever.
Satisfies
| Criterion | Text |
|---|---|
| SOC2 CC7.2 | The entity monitors system components for anomalies that indicate malicious acts, natural disasters or errors. |
| SOC2 PI1.5 | The entity stores inputs, items in processing and outputs completely, accurately and on time. |
| ISO27001 A.5.33 | Records are protected from loss, destruction, falsification, unauthorized access and unauthorized release. |
| HIPAA 164.312(c)(1) | Electronic protected health information is protected from improper alteration or destruction. |
Implemented by
Test
| Step | Rule |
|---|---|
| Kind | Preventive: it stops the failure before it happens. |
| Select | Every grant on the Event log, and every write attempt the control tester makes. |
| Assert | No grant includes update or delete, zero bypass Events exist, and at least one tester attempt per period ends refused. |
Owner
Security Engineer, Engineering Team.
Example
A tester asks to delete last week's Invoice.paid Events for a dental-reminder SaaS. No grant allows it, so the request ends refused, and the refusal is itself a new Event in the log.