Example
A payroll system records the user who changed an employee's bank details and the approval associated with the change.
What to keep in mind
A log is useful only if it is reliable, protected and reviewed when needed. Avoid collecting unnecessary sensitive content and ensure authorised users cannot silently alter the evidence of their own actions.