IL3 (Detect and Resist) Controls
Integrity checks failures at any point in the log handing chain.
Log access query requests including requests for production of log extracts.
The central collector(s) should be able to query the online and selectively retrieved archive accounting data2