Comprehensive and Detailed Explanation From Cisco SP Cloud Network Infrastructure Security Knowledge
Cloud security compliance frameworks (such as ISO 27001, PCI-DSS, GDPR, SOC 2, HIPAA) require:
Evidence of security events
Retention of logs for audit periods
Ability to generate compliance reports
Traceability and accountability
Incident investigation support
Effective log management enables:
Centralized collection of application, network, and system logs
Storage of logs for mandated retention periods
Generation ofaudit-ready reports
Documentation required for compliance assessments
Demonstration that monitoring and security controls are active and functioning
Therefore, the role of log management in regulatory compliance is primarily aboutdocumentation, traceability, auditing, and reporting, which aligns only with Option A.
The other options do not directly serve regulatory compliance requirements:
Brelates to resource optimization, not compliance.
Crefers to interoperability, which is unrelated to regulatory auditing.
Dimproves security but does not directly address compliance documentation.
