Are all operating systems, applications, and services (including cloud-based services) configured to generate appropriate log records?

Log generation is a fundamental security control that provides visibility into system activities, user actions, and potential security incidents. Without proper logging configured across all systems, it becomes extremely difficult to detect unauthorized access, investigate security incidents, or maintain an audit trail for compliance purposes. Evidence of fulfillment could include a logging configuration standard document, screenshots of logging settings from representative systems, or output from an automated configuration management tool showing logging parameters across the environment.