Auditability:

• It should be possible to track who or what has access the database.
• This can be accomplished a number of ways
  • Log files generated by RDBMS
  • Data collected by access applications
  • Data collected and stored as part of the schema