What it asks for. Synchronise the clocks of information processing systems used by the organisation to approved time sources.
In practice. Systems obtain time from a defined set of reliable internal sources, which in turn reference trusted external sources such as national time services or satellite based references. Configuration is applied consistently across servers, network devices, cloud workloads and security tools, and time zones and formats in logs are standardised, often to UTC. Drift is monitored and alerted. This matters for correlating events in investigations and for evidence integrity. Auditors check the time architecture, configuration samples and drift monitoring.
Common gaps. Network devices, appliances and operational technology are often left with default or no time sources. Logs collected in mixed time zones make incident timelines unreliable and slow down investigations.