Result of the resolution: Declaration of breach
It is considered that the imputed entity would have harmed the MS related to the register of accesses, due to not recording the information on the denied accesses; not having installed any mechanism that prevented its manipulation; and not to have revised -for the responsible for security- the recorded information nor to have elaborated the corresponding reports about these revisions. Applied articles: Art. 9 and 44.3.h) LOPD, and 103 RLOPD