. . . . . "The requirements shall also specify what information to log with each event, including time and date, event description, application details, and other information useful in forensic efforts.+" . .