Re: [logs] RE: log retention periods (fwd)

From: todd glassey (todd.glasseyat_private)
Date: Tue Jan 29 2002 - 06:31:24 PST

  • Next message: Bill Burge: "Re: [logs] Apache Logs"

    ----- Original Message -----
    From: "Tina Bird" <tbird@precision-guesswork.com>
    To: "Log Analysis Mailing List" <loganalysisat_private>
    Sent: Monday, January 28, 2002 2:43 PM
    Subject: [logs] RE: log retention periods (fwd)
    
    
    >
    > On Fri, 28 Dec 2001 Bonny_Allenat_private wrote:
    >
    > > Hello Tina Bird:
    > >
    > > I got your name and contact information from the LogAnalysis bulletin
    > board
    > > sponsored by Security Focus.
    > >
    > > I'm researching computer network/system log retention periods -
    > specifically
    > > what length time periods are recommended
    > > to state agencies for retaining the following types of logs from their
    > > computer network system:
    
    Depends on what legal requirements they are intended to meet.
    
    In your case I would worry more about HIPAA compliance and being able to
    prove how secure and reliable the audit process is rather than how long it
    must be maintained forunless you are tryingh to set that said same standard.
    
    I would think that your local Secretary of State(SOS) or the Attorney's in
    the SOS's office should be able to give you the guidelines you need here.
    Otherwise check with the people that run your Statewide Criminal Services
    Data Base and see what their retention policies are.  The check with teh
    Bureau for those for NCIC and you will probably have your answers.!
    
    
    Todd
    
    
    > >
    > > Internal
    > > Windows NT System Event logs
    > > Email records
    > > Internet Usage Monitoring Software
    > > Remote Access logs
    > > Network Edge routers
    > > Database transactional logs
    > >
    > > External
    > > Firewall logs
    > > Intrusion detection software
    > >
    > > The goal being to have these logs available should law enforcement need
    > > them. Do you know of any such recommendations?
    > >
    > > Any information, references or contacts you can provide would be greatly
    > > appreciated.
    > >
    > > Bonny Allen
    > > Inspector Specialist
    > > Office of the Inspector General
    > > Florida Department of Health
    > > Phone (850) 245-4444 x 2151  SC 205-4444 x 2151
    > > Fax (850) 413-8985 Fax SC 293-8985
    > > Bonny_Allenat_private
    > >
    > >
    > >
    > >
    >
    >
    > ---------------------------------------------------------------------
    > To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    > For additional commands, e-mail: loganalysis-helpat_private
    >
    
    
    ---------------------------------------------------------------------
    To unsubscribe, e-mail: loganalysis-unsubscribeat_private
    For additional commands, e-mail: loganalysis-helpat_private
    



    This archive was generated by hypermail 2b30 : Tue Jan 29 2002 - 10:05:20 PST