A tenant retains logs locally in the same account administered by the people being monitored. Which improvement strengthens evidence integrity?

1. Keep only a dashboard screenshot without underlying events
2. Allow administrators to overwrite logs to correct their own mistakes
3. Send logs to separately controlled storage with appropriate retention protections
4. Disable logging for privileged sessions to reduce storage cost