Skip to main content

Story 2.8: Security Audit Logging

FieldValue
Story Points8
SprintSprint 7-8

User Story​

As a Compliance Officer
I want comprehensive audit logs of all security events
So that we can investigate incidents and prove DPDPA compliance

Events Tracked​

  • AUTH: Login, logout, password changes, MFA
  • DATA_ACCESS: Views, searches, exports
  • DATA_CHANGE: Create, update, delete
  • PERMISSION: Access grants/denials
  • ADMIN: User management, role changes
  • SECURITY: Rate limits, suspicious activity