23 CAR § 355-1909. Remote access auditing

The CSS server must maintain an activity log either automatically or have the ability to manually enter the logs depicting all remote access information that includes: (1) The log on name; (2) Time and date the connection was made; (3) Duration of connection; and (4) Activity while logged in, including the specific areas accessed and changes that were made.