Why it matters
Without logs, you can't investigate an incident, prove what happened, or catch it early.
How a self-led small team implements it
Centralized logging for authentication events and admin actions is the practical starting point at small scale.
What auditors expect to see
Logging configuration, sample logs.
Track A.8.15 in your own Statement of Applicability — mark it applicable, log your justification, and link it to the risk that drove it.
Start your ISMS