Mechanisms exist to specify the permitted actions for both users and systems associated with the review, analysis and reporting of audit information.