Configuration change logging records when system settings or operating parameters are altered, including what changed, when it changed, and often which user or process made the change. In operational technology, this can cover controller settings that affect industrial processes, alarms, or remote access.
These records help operators identify unauthorized or unexpected changes, investigate incidents, and restore known-good settings. For example, monitoring logged changes to refrigeration controls can help defenders spot an unusual temperature or cycle adjustment. Logs are most useful when they are protected from tampering, time-synchronized, retained appropriately, and reviewed or alerted on-not merely collected.