A financial services company is deploying a new set of internet-facing web applications in Azure. The security architect must ensure the design conforms to the Microsoft Cloud Security Benchmark (MCSB) so it can be audited against a recognized control framework. During design review, the compliance team asks which MCSB control domain governs the requirement to enable and centralize security-relevant logs so that threat detection and incident investigation are possible across all Azure resources. Which MCSB control domain should the architect cite to satisfy this requirement?