Which of the following best describes a complete and compliant audit trail in electronic records?

• A. A simple log of data changes with no details.
• B. A log of changes and user IDs, but without timestamps.
• C. A log of changes that cannot be audited.
• D. A comprehensive log of all actions with identity, action, timestamp, and rationale.

Answer: (D)

An audit trail for electronic records must provide a complete, verifiable history of activities. It should show who did what, when, and why, so you can reconstruct events, verify integrity, and hold individuals accountable. This means recording the user identity, the exact action taken, the precise timestamp, and the rationale or justification for the change. When all these elements are present, the log supports traceability, regulatory compliance, and non-repudiation, because actions can be linked to real users and justified decisions.

The other options fall short because they miss essential pieces: a simple log of data changes without details can’t identify who made the change or when it happened; a log that includes user IDs but lacks timestamps can’t establish the sequence of events; a log that cannot be audited is unusable for verification and accountability.