CAIQ v4 Control LOG-06 Extractive Review Standard

How to answer 'Are administrator activities in the cloud console logged and alerted?' on a CAIQ

Reviewer Guidance & Pitfalls

Cite AWS CloudTrail / GCP Audit Logs with immediate Slack/email alerting on sensitive IAM changes.

Example Answer Passing Enterprise Audit

Compliant Response Template
Yes. AWS CloudTrail records all management console events; alerts fire in real time for security group modifications or root account usage (SOC 2, CC7.2).

Filling out a CAIQ or SIG Lite right now?

QuietQuestionnaire automatically drafts answers with citations from your own SOC 2 report, catches contradictions reviewers reject, and locks exports behind cryptographic human sign-off.

Zero spam. 100% confidential. No credit card required.