The procedure for obtaining audit logs is as follows:

1. The Auditor enters the server area physically isolated from the outside in accordance with the Entry and Exit Procedure document.
2. The Auditor logs into the audit log server and obtains audit logs from the machines running a variety of servers.