CCI-000125

Provide a rationale for why the event types selected for logging are deemed to be adequate for support after-the-fact investigations of incidents.