1. A method of monitoring for security information about an access system, comprising the steps of: detecting an access system event in said access system wherein: the access system event is associated with a user having an identity profile maintained at said access system, said identity profile includes a plurality of attributes having attribute values; and the access system event is associated with one or more event types; storing the access system event as an audit log entry in an audit log in a plurality of audit logs, wherein the audit log is associated with at least one of the one or more event types associated with the access system event; monitoring the audit log with an audit log sensor for events associated with at least one of the one or more event types associated with the access system event; accessing instructions for an event type associated with said access system event, wherein said instructions specify that a value of one or more attributes of said plurality of attributes in said identity profile is to be added to said audit log entry; accessing said identity profile for said user in response to said instructions; adding said value of one or more attributes of said plurality of attributes in said identity profile of said user to said audit log entry in accordance with said instructions; and storing said audit log entry including said one or more attribute values in an application server; and sending a set of log entries including the audit log entry to a security server.