According to 'best practice', every role and responsibility for every member of the customer environment should be documented and then managed, again with clear audit trails and authorisations. Therefore, the physical movement of staff, their locations and responsibilities, the requesting, authorisation and approval of personnel activities must all be monitored, recorded and reported on.
