Audit log

Every change in Risk Core — in ERM Core, in BCP Core and in administration — lands in one audit log for the company: who did it, when, what it was before and after, and in which entity. The log is append-only: nobody can edit or delete an entry, including the administrator.

Who may read it: the Entity Risk Manager, for their own entity; auditors, through a read role granted in that entity; the administrator. See Roles and permissions.

What is logged

Who	the account that acted, and the role it acted under
When	date and time
What	the record and the act — created, changed, submitted, approved, returned, validated, closed
Before / after	the values before and after the change
Entity	the company and unit where the act took place

This covers the registers and their sign-offs, BCP levels and their orders, the operator’s activation, call-tree activations, check-in deletions, and administration itself: the structure, people and accounts, authenticator resets, role grants and revocations, group configuration, imports and exports.

Read the log

1. Open Audit log.
2. Filter by person, date range, module, record or unit.
3. Open an entry to see the values before and after.
4. Choose Export for Excel or PDF — see Exports.

Who can read which entity’s log

• Each company has its own log. It records the acts done in that company.
• A parent company does not read a subsidiary’s log. It has no access to the subsidiary’s records; it receives what the subsidiary has reported up (Security and data).
• Auditors of a company read its log through a read role granted in that company.

What the system does or refuses

• Append-only. No entry can be changed or removed, by any role.
• Every act is stamped with its author and time (Who-filed is stamped).
• The log follows the reader’s rights. A reader sees the entries of the entity where their role is granted and the units beneath it.

Related

• Product rules
• Security and data
• Exports