The CSS server must maintain an activity log either automatically or have the ability to manually enter the logs depicting all remote access information that includes:

1. (1) The log on name;
2. (2) Time and date the connection was made;
3. (3) Duration of connection; and
4. (4) Activity while logged in, including the specific areas accessed and changes that were made.

Codification Notes: “CSS” means client-server system.