Why are audit trails important when sharing data with a third-party vendor?

• A. They provide a record of who accessed data and when, supporting accountability.
• B. They automatically encrypt data.
• C. They ensure data is never altered.
• D. They prevent phishing attacks.

Answer: (A)

Audit trails are essential when sharing data with a third-party vendor because they create a verifiable log of who accessed data, what actions they took, and when those actions occurred. This visibility makes accountability possible—individuals and systems can be traced for every access or data operation, so responsibilities are clear. With these records, you can monitor for unusual or unauthorized activity, investigate incidents quickly, and demonstrate compliance to regulators and business partners. The trails also support governance by showing that access and usage align with agreed terms, helping enforce least privilege and effective vendor oversight. Other measures like encryption, data integrity checks, or anti-phishing controls address different goals, but they don’t provide the ongoing record of access and actions that audit trails offer.