Your access records are only as good as your ability to prevent someone from making unauthorized access.