Which statement describes audit log characteristics required under Annex F?

• A. Logs must be deleted after 24 hours.
• B. Logs should be immutable, time-synchronized, tamper-evident, and retained per policy.
• C. Logs should be stored in plaintext on user devices.
• D. Logs are optional and not required.

Answer: (B)