Journal Q&A (11/02)

Q: When should a change to scanned documents in an information system be identified as a late entry?

A: An entry is not considered "late" in a set time frame. Generally, an entry should be made as close to the event as possible. The more time that passes, the more suspicious and vulnerab....