There should be the ability for sites to pull and/or builds reports on the audit logs. Sites that have multiple CoCs or States in one system, actually really any site, need to be able to monitor the security of the data and the Audit Logs are the best way to do this.