Things like DB access logging are all good technical defences and shouldn't be overlooked, but they're worth absolutely squat if the business layer stops you operating in the way that's needed.