Common use of Logging, Audit and Accountability Clause in Contracts

Logging, Audit and Accountability. Supplier will: a. Create, protect, and retain information system audit records to the extent needed to maintain integrity and enable the monitoring, analysis, investigation, and reporting of unlawful, unauthorized, or inappropriate information system activity. For the avoidance of doubt, “audit” is used interchangeably with the term “log” in this Exhibit. b. Ensure that the actions of individual information system users can be uniquely traced to those users so they can be held accountable for their actions. c. Log the following events at a minimum on information systems: i. Successful login attempts; ii. Unsuccessful login attempts; iii. All logoffs; iv. Additions, deletions and modifications to User and system accounts/privileges; v. Users switching IDs during an online session; vi. Attempts to perform unauthorized functions; EA-3