6.1.1 The repository shall log and review all access management failures and 
anomalies. 
Supporting Text 
This is necessary in order to identify security threats and access management system failures. 
Examples of Ways the Repository Can Demonstrate It Is Meeting This Requirement 
Access logs, capability of the system to use automated analysis/monitoring tools and 
generate problem/error messages; notes of reviews undertaken or action taken as a result of 
reviews. 
Discussion 
A repository should have som