Here's a weak argument to say that log files can improve security: IF * security means reducing risks to the confidentiality, integrity, and availability of

Here's a weak argument to say that log files can improve security: IF * security means reducing risks to the confidentiality, integrity, and availability of information; * risk is a function of likelihood and impact; * the longer an attacker has unauthorized access to information, the bigger the impact; and * if log files are reviewed frequently THEN * unauthorized access can be detected; * corrective actions can be taken; * unauthorized access can be stopped or limited; * thus reducing the impact; * thus reducing the risk; and * thus improving security. But, in reality, the corrective action reduced the risk, not the detective control (logs and reviews), so this is a weak argument.