(ISC)2 Certified in Cybersecurity Practice Exam

What type of documentation serves as evidence of activities performed or results achieved within an organization?

1. Records

2. Reports

3. Logs

4. Protocols

The correct answer is: Records

Records serve as formal documentation that provides evidence of activities performed or results achieved within an organization. They can encompass a wide range of materials, including transaction records, meeting minutes, compliance documentation, and other forms of data that provide a snapshot of an organization’s operations. The purpose of records is to maintain a detailed and accurate account of past activities, which can be crucial for legal compliance, operational audits, and future reference. They help ensure accountability and transparency, allowing organizations to track changes over time and verify that procedures are followed correctly or targets are met. In contrast, reports summarize information and findings, typically compiling data from various sources to present a broader view of performance or outcomes. Logs specifically track events or changes, often in real time, documented in chronological order, and are more focused on ongoing activities rather than comprehensive accounts. Protocols outline standard procedures or rules to be followed within an organization but do not serve as evidence of actions taken or outcomes achieved.