The process of accumulating records of activities on a system. This typically includes the act of monitoring and responding to these activities. Auditing is never performed in real time and is considered a detective control.