HUMAN VERIFICATION REQUIRED ASVS 16.3.2 Authorization logging

Failed authorization attempts are logged. For L3, this must include logging all authorization decisions, including logging when sensitive data is accessed (without logging the sensitive data itself).