A compliance control requires historical evidence of resource access changes. What is necessary beyond enabling collection today?

1. Appropriate retention, protected access, completeness monitoring, and retrievable evidence.
2. Treat resource names as a complete change history.
3. Assume today's dashboard can reconstruct every previously uncollected event.
4. Delete old logs whenever the dashboard becomes slow.