https://vacua.dev/tags/auditing/Recent content in Auditing on Brian FaustHugoen-USMon, 01 Jan 0001 00:00:00 +0000https://vacua.dev/thoughts/audit-history-is-different-from-application-logging/Wed, 01 Nov 2017 00:00:00 +0000https://vacua.dev/thoughts/audit-history-is-different-from-application-logging/<p>When a cart appears to expire, support may ask:</p> <figure class="code-figure"> <div class="code-block" data-copy-code> <button class="copy-code" type="button" aria-label="Copy code">copy</button><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">Which cart changed? </span></span><span class="line"><span class="cl">What was its prior state? </span></span><span class="line"><span class="cl">What state followed? </span></span><span class="line"><span class="cl">Who or what caused the transition? </span></span><span class="line"><span class="cl">Which policy allowed it?</span></span></code></pre></div> </div> </figure> <p>An engineer investigating the same report may ask:</p> <figure class="code-figure"> <div class="code-block" data-copy-code> <button class="copy-code" type="button" aria-label="Copy code">copy</button><div class="highlight"><pre tabindex="0" class="chroma"><code class="language-text" data-lang="text"><span class="line"><span class="cl">Which request handled it? </span></span><span class="line"><span class="cl">Which worker retried? </span></span><span class="line"><span class="cl">How long did the database call take? </span></span><span class="line"><span class="cl">Which exception and stack occurred? </span></span><span class="line"><span class="cl">What else happened on that host?</span></span></code></pre></div> </div> </figure> <p>Both groups need evidence. They do not need the same record.</p>