User Access Audit – Determining Who Used Access Rights, and How

Mark Dixon at Discovering Identity writes about a question he is being asked about user access attestation. Are his ideas a significant part of user access attestation or only a peripheral concern? Link: http://goo.gl/uFh1F

[b]Who Used those Access Rights, How? Discovering Identity[/b] discoveringidentity.com
A natural question in an Identity Audits is, “Who has access to what?” and “Who granted those access rights, when?” But should a new question be asked? – “Who used those access rights, how?