Why does using SysLog help the company comply with its security policy?

Syslog is an industry-standard protocol for sending log messages from a variety of network devices and applications to a central logging server. This centralization, combined with its standardized format, makes it significantly easier to query, correlate, and analyze security-relevant events, which is crucial for compliance with security policies.

Syslog itself does not inherently password-protect the audit logs; security for syslog depends on the implementation of the syslog server and underlying operating system security controls.

While Syslog uses standard ports (e.g., UDP 514 or TCP 6514 for secure syslog), the use of a standard port alone does not directly contribute to compliance with security policies.

Collecting logs from multiple devices is a key capability of Syslog, but the reason this feature helps with compliance is the resulting centralization and ease of querying, which is covered by option A.