Monitoring and logging can be done without access to controls.