How are access logs recorded?

Access can be logged with a timestamp, user, action, origin, and outcome, depending on the level of audit required. Logs must be protected from unauthorized changes, kept for a period consistent with the risk, and viewable only by authorized roles.