For audit readiness, how should incident data be stored?

For audit readiness, how should incident data be stored?

• A. In a handwritten notebook only
• B. Secure, backed up, indexed, with access controls and version history
• C. On a single local hard drive with no backups
• D. In an unencrypted spreadsheet shared publicly

Answer: (B)

For audit readiness, incident data must be stored in a secure, durable, searchable system that preserves who did what, when, and why. The best approach keeps data protected and reliable by providing back-ups, a way to index and quickly locate records, strict access controls to limit who can view or modify information, and version history to track changes over time. This combination ensures confidentiality, integrity, and availability during audits, and it also supports traceability and recovery if something goes wrong. Storing data only in a handwritten notebook is unreliable for audits due to legibility issues, loss, and the lack of searchability or formal controls. A single local hard drive with no backups creates a single point of failure and offers no protection against data loss or tampering. An unencrypted spreadsheet shared publicly exposes sensitive information, lacks proper access controls, and provides no audit trail or versioning, making it unacceptable for audit purposes.

For audit readiness, incident data must be stored in a secure, durable, searchable system that preserves who did what, when, and why. The best approach keeps data protected and reliable by providing back-ups, a way to index and quickly locate records, strict access controls to limit who can view or modify information, and version history to track changes over time. This combination ensures confidentiality, integrity, and availability during audits, and it also supports traceability and recovery if something goes wrong.

Storing data only in a handwritten notebook is unreliable for audits due to legibility issues, loss, and the lack of searchability or formal controls. A single local hard drive with no backups creates a single point of failure and offers no protection against data loss or tampering. An unencrypted spreadsheet shared publicly exposes sensitive information, lacks proper access controls, and provides no audit trail or versioning, making it unacceptable for audit purposes.