An audit trail of activities is a vital part of the IS control mechanisms, in IBM's MVS operating system the primary audit trail is SMF. In addition to its function of recording system events SMF is also used by the access control software. This session will introduce the working of SMF and highlight some of the controls and areas to watch to ensure that the SMF audit trail is complete and reliable.