RISK-AI-002
The audit log is truncated without detection
Moderate
Records are removed from the end of the hash chain. What remains is internally valid, so walking the records cannot detect it.
- Status
- identified
- Category
- evidence-integrity
- Owner
- secops@arctransformationgroup.com
- Treatment
- mitigate
- Inherent
- Moderate impact 5 × likelihood 2 = 10
- Residual
- Not reviewed. ARC does not compute this: it needs a named reviewer and their rationale, or it does not exist.
- Review due
- not set