We have a system that outputs and rotate logs on a daily basis.
If an auditor requests us to provide logs of a particular date for a particular task, are we obliged to provide a complete full day log? Or can we provide, say an omitted log or screenshot of the log portion that shows only portion of the particular task? Would auditor questions the integrity of partial / omitted / screenshot of logs?
My personal answer is that I would not agree to providing complete full day log as these logs may contain other confidential or sensitive information that may be out of the audit scope.