A system log with a timestamp is not proof that a disclosure happened when an organisation says it did — it is a claim the organisation itself generated and controls. This article sets out, in general terms, what a record actually needs before it can function as independent proof of timing.

3,383 major ICT incidents, one joint ESA report, and a methodology section that quietly admits the data is incomplete and not yet fully validated. This article examines what it means that the reference benchmark regulators now cite was built entirely from entities' own self-declared accounts of themselves.