Documenting external information systems access