The information system enforces access restrictions and supports auditing of the enforcement actions.