• What I've observed is that the compliance folks typically don't want access to anything. Otherwise they are performing GONZO auditing because they've added themselves into the mix. They want the technical folks to deliver copies of logs, documentation, access logs, audit logs/reports, etc. But here again, this does imply trust and an assumption that the dear old DBA doesn't have time or access to doctor everything prior to delivering the requested documentation.

    M