What method should be used, in addition to policy review, to verify that daily log reviews are performed?

What method should be used, in addition to policy review, to verify that daily log reviews are performed?

• A. Automated log aggregation without human checks.
• B. Observe processes and interview personnel.
• C. Only periodic external audits.
• D. No verification required.

Answer: (B)

To verify that daily log reviews are performed, you need evidence of the actual practice, not just the written policy. Observing how the log review is carried out and interviewing the personnel responsible provides real-world validation: you can confirm that reviews happen every day, understand exactly what is being reviewed, see how findings are handled, and verify there is documentation or sign-off showing the review occurred. This hands-on verification shows both the process and its execution, including roles, timing, and remediation actions. Automated log aggregation without human checks would confirm only that logs exist, not that a daily review was performed. Periodic external audits cover a snapshot in time and may miss day-to-day variations. No verification would leave a gap in assurance that daily reviews are actually happening.

To verify that daily log reviews are performed, you need evidence of the actual practice, not just the written policy. Observing how the log review is carried out and interviewing the personnel responsible provides real-world validation: you can confirm that reviews happen every day, understand exactly what is being reviewed, see how findings are handled, and verify there is documentation or sign-off showing the review occurred. This hands-on verification shows both the process and its execution, including roles, timing, and remediation actions.

Automated log aggregation without human checks would confirm only that logs exist, not that a daily review was performed. Periodic external audits cover a snapshot in time and may miss day-to-day variations. No verification would leave a gap in assurance that daily reviews are actually happening.