- (a) The on-line monitoring system must support either a hierarchical role structure whereby user and password define program or individual menu item access, or logon program/device security, based strictly on user and password or PIN.
- (b) In addition, the online monitoring system shall not permit the alteration of any significant log information communicated from the EGS.
- (c) Additionally, there should be a provision for system administrator notification and user lockout or audit trail entry after a set number of unsuccessful login attempts.