8.3.5 TODOΒΆ

Verify accessing sensitive data is audited (without logging the sensitive data itself), if the data is collected under relevant data protection directives or where logging of access is required.

Level 1  
Level 2 X
Level 3 X
CWE NIST
532