The organization should synchronize the clocks of its information processing systems with approved time sources to facilitate event correlation, data analysis, and incident investigations. A standard reference time should be established and applied consistently across all systems, including building management and access control systems, to support investigations effectively.
Synchronizing clocks between different systems allows for good interoperability, as well as easier tracking of problem situations and perception of event flows.
An organization must use a reliable source to adjust and synchronize time, at least for systems that are critical to its operations. When suitable organization should use two sources.