Reviewing should include accessing and examining event logs.