Re: Log Retention

[Bill_Royds () pch gc ca]

In Canada, a federally regulated body (federally incorporated, government
department etc.) must keep communications logfiles (phone usage records, mail
logs, firewall logs) for 2 years.
Basically it is to give Access to Information requests some reasonable time
limit. Your Access to Information laws may have a similar requirement.






"Brown, Frederick" <BrownFred () aafes com> on 01/25/2001 09:06:47 AM
                                                              
                                                              
                                                              
 To:      "'firewall-wizards () nfr com'"                        
          <firewall-wizards () nfr com>                          
                                                              
 cc:      (bcc: Bill Royds/HullOttawa/PCH/CA)                 
                                                              
                                                              
                                                              
 Subject: [fw-wiz] Log Retention                              
                                                              





Hi...

I am in the process of writing a security policy on how long we should
retain security logs/review logs at our site. Is there an industry standard
and/or a BCP available on this topic?

Thanks,
Frederick A. Brown
Computer Security Specialist
IS-A Security
Brownfred () aafes com
Phone: (214) 312-3683   Fax: (214) 312-2658
ARMY & AIR FORCE EXCHANGE SERVICE (AAFES)




_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards