Legislation has been passed requiring more focus on who is accessing corporate data assets. Key to this is being able to answer the 5 basic audit questions - who, what, when, where and how - was data accessed.
IMS Auditing – who what, when, where, and how