It's more about tampering with the audit log. "Company A provided their audit logs to prove their innocence." Did they? Well. Maybe. How do we know it's the full log. How do we know it wasn't altered? Sure, the company can digitally sign it, but what does that prove?
MiddleKnight@discuss.tchncs.de 10 months ago
Then sign and send the audit log in realtime to the authority which A provided their logs to. Same effect no blockchain.
You could also encrypt and publish it. But realistically there is always going to be some entity actually responsible for enacting the consequences for non-compliance and they are the only entity that really ever needs to check these logs.
I am not sure I understand what the incentives to “mine” this blockchain would be. Without a certain block difficulty, which requires many miners, it will be trivial to rewrite the entire chain.