Is audit the recording of a sequence of events that occurred in the system?

Yes, audit in information systems is the process of recording the sequence of events that occur in the system, for the purpose of subsequent analysis, control, and security assurance.

Audit allows:

• Tracking user actions and system processes.
• Providing evidence for incident investigation.
• Ensuring compliance with security policies and regulatory requirements.

Example: in a banking system, an audit may record login operations, account setting changes, transactions, etc. All these events are recorded with timestamps and user identifiers, which allows reconstructing the chronology and identifying possible violations.

Thus, audit is precisely the recording and storage of the sequence of events that occurred in the system, to ensure transparency and control.