How to meet it
OWASP AISVS v1.01
Monitoring, Logging & Anomaly Detection · Proactive Security Behavior Monitoring
Audit-log autonomous actions
Verify that audit logs capture security-critical proactive actions, including approver identity, timestamp, action parameters, and decision outcomes.
OWASP AISVS v1.01, requirement 12.4.2
In plain English
Log security-relevant actions agents take on their own initiative, with who approved them, when, the parameters and the outcome.
What good looks like
- Each record has approver, timestamp, parameters and outcome.
- Records are tamper-evident.
- They can be searched in investigations.
How teams usually do it
- Structured audit logging from the tool gateway to append-only storage.
Evidence an auditor would accept
- Sample audit records.
Common mistakes
- Logging the action without the approver.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.