I'm studying for the CCSP exam and one of the examples of technical controls (referenced in the course training material) confuse me:
Technical controls, also referred to as logical controls, are those controls that enhance some facets of the CIA triad, usually operating within a system, often in electronic fashion. Possible technical controls include encryption mechanisms, access control lists to limit user permissions, and audit trails and logs of system activity.
Can someone please explain why logs, in and of themselves, can be considered a technical control? To me, it seems like logs would be something that's not a control by itself, but a resource that aides other technical controls (like an alert monitor that reviews log material and warns administrators, etc).