Recording and preserving user activity so that it can be checked later. This makes it possible to look back and review information such as which service was logged into and when, or when a password was changed.