The correct option is It ensures consistent application and oversight of security controls across the organization.

Keeping detailed records of security controls documents how controls are designed, implemented, tested, and monitored. These records enable leadership to verify consistent application and to assign responsibility, which supports effective oversight and helps ensure that controls work as intended.

Detailed records also support audits, incident response, and continuous improvement because they provide evidence of control operation, track changes over time, and show approved exceptions and remediation actions. That operational history makes it easier to reproduce configurations, onboard staff, and demonstrate compliance.

Cloud Audit Logs is incorrect because it names a specific logging service rather than explaining the governance purpose of keeping comprehensive records. A logging product can help collect evidence but the question asks why recordkeeping is important for an information security management program.

It reduces how often external or internal control assessments are required is incorrect because maintaining records does not change assessment schedules. Records can make assessments more efficient by providing evidence, but regulatory, contractual, and risk-driven requirements still determine how often assessments must occur.

It allows personnel to bypass established procedures during urgent situations is incorrect because recordkeeping is intended to enforce controls and document any approved deviations. Allowing bypasses increases risk and any emergency exceptions should be controlled, authorized, and recorded rather than enabled by the records themselves.

Full AWS Practitioner Certification Question