RE: Duration of log retention?

Correct,

The regulatory legalities and nature of the business are the driving factors.

Quando Omni Flunkus Moritati

-------------- Original message -------------- 
From: "Warren Camp" <wcamp@cox.net> 

The retention of company data is a legal question, not an IT question to 
answer.  The reason it is a legal question is the the company is require to 
meet or exceed the data retention requirements of the SEC, SOX, IRS, external 
and internal audit requirements.  If you do not have any other guidance keep 
security logs, logs that monitor administrative and configuration changes and 
usage, and logs that monitor changes in production data for a minimum of 15 
months.


Warren V. Camp, CPA, CISA, MS, MBA
Warren V. Camp, CPA, LLC
Risk Mgt, SOX, GCC, Audit/Log Mining
703.919.3208 (mobile)





From: Doug Fox [mailto:dfox168@hotmail.com] 
Sent: Wednesday, June 07, 2006 10:04 PM
To: security-management@securityfocus.com
Subject: Duration of log retention?



I am searching for retention duration for various logs.  Any input are much 
appreciated. 

Firewall log - 1 year
IDS log - 1 year
IPS log - 1 year
Router log - 1 year
Switch log - 1 year
Windows server: Security log - 1 year
Windows server: Application log - 3 months
Windows server: Systems log - 3 months
*IX server - security log equivalent - 1year
RACF (mainframe) logs - 1 year
Database - ?? log
What-else have I missed?


Many thanks in advance.

DF