Section 28(2)(vii) in The Credit Information Companies Rules, 2006
(vii)ensure the maintenance and review of records and entries of log, on a regular and frequent basis to detect and investigate any unusual or irregular patterns of use of or access to data including creation of the audit trails and verification thereof;