## Accounting (Non-Repudiation)

"What did you do?"
Tracking user actions to ensure accountability.

### Logging
*   **Who**: user `jsmith`.
*   **What**: Accessed `salary_database.db`.
*   **When**: `2024-12-25 04:00:00`.
*   **Where**: From IP `10.5.5.5`.

### Non-Repudiation
Proof that someone did something so they cannot deny it later.
*   **Digital Signatures**: If I sign an email with my Private Key, I cannot claim "I didn't write that", because only I have the key.
*   **Audit Trails**: Logs sent to a central SIEM that users cannot delete.