Definition
Audit support refers to the collection, preservation, and presentation of evidence necessary to demonstrate compliance with policies, regulations, or security standards. It involves establishing procedures for logging system activities, monitoring events, and retaining records in a secure and accessible manner. This capability is crucial for verifying that security controls are functioning as intended and for investigating security incidents. For instance, maintaining detailed access logs allows an organization to track who accessed sensitive data and when. Audit support differs from simple logging by focusing on the readiness and structure of data for external review or internal investigation. This concept is vital for domains like security operations, compliance, and incident response, appearing on certifications such as Security+ and CySA+.