[Autogenerated] now where Requirement 10.2 was about the types of event
that need to be logged so they could be reconstructed.
Requirement 10.3 is about the detail associated with each log entry,
and that's given in the next six sub requirements,
which we're not going to spend lots of time on.
Because basically the standard demands that you record the user ID,
the type of event, the date and time it happened,
whether it was success or failure,
the source the user came from search the user's machine,
the I P address, and then what system or component generated the audit log entry.
So that's basically the who, what, when,
how, where and where that has to be logged for every event.
The testing procedure for all of the 10.3 sub requirements is
for the use A to look at the audit logs to see that these six
attributes recorded for each event