Which control primarily provides a record of who accessed credentialing data and what changes were made?

Which control primarily provides a record of who accessed credentialing data and what changes were made?

• A. Access controls
• B. Audit trails
• C. Data validation
• D. Backup/recovery

Answer: (B)

Audit trails provide a chronological record of who accessed credentialing data and what changes were made. They log the user, the time of access, and the specific actions or modifications, creating a trail that supports accountability, security monitoring, and regulatory compliance. While access controls govern who may reach data, they don’t automatically document every action. Data validation ensures input accuracy, not activity logging. Backup and recovery focus on preserving and restoring data after loss, not on who did what to the data.

Audit trails provide a chronological record of who accessed credentialing data and what changes were made. They log the user, the time of access, and the specific actions or modifications, creating a trail that supports accountability, security monitoring, and regulatory compliance. While access controls govern who may reach data, they don’t automatically document every action. Data validation ensures input accuracy, not activity logging. Backup and recovery focus on preserving and restoring data after loss, not on who did what to the data.