Why are access controls important for incident data in audits?

• A. They slow down audits
• B. They are unnecessary if backups exist
• C. They ensure everyone can edit the data
• D. They limit who can view and modify records, preserving integrity

Answer: (D)

Access controls limit who can view and modify incident data, preserving integrity during audits. When incident records, logs, and evidence are relied upon to verify what happened, who handled it, and when, it’s essential that only authorized individuals can access or change them. This prevents tampering, ensures accountability, and creates a trustworthy, auditable trail of actions. Proper controls also support the chain of custody for evidence and help demonstrate compliance with regulatory and policy requirements. Backups don’t prevent unauthorized edits, and making everyone able to edit would undermine the reliability of the data.