Access Controls - Plan for review of access logs (R3)

As per our preliminary review of the STRA: Regular review of access logs are planned but not yet defined or implemented. In order to remediate this risk the recommendation is to regularly review and update access controls, including user re-certification.

Refinement and documentation of process is required.
*Note this may be impacted by decisions on how to obtain access. Currently Zenhub #20001 is assuming keycloak roles will exist for competent authorities, but confirmation of the flow for requesting access is required.