Technical controls write logs to tamper-evident storage and enforce retention periods automatically
Writing logs to storage ordinary admin accounts cannot alter and enforcing retention automatically covers the protection half of A.8.15, which also requires producing and storing the events in the first place.