[prev in list] [next in list] [prev in thread] [next in thread] 

List:       loganalysis
Subject:    Re: [logs] RE: log retention periods (fwd)
From:       "todd glassey" <todd.glassey () worldnet ! att ! net>
Date:       2002-01-29 14:31:24
[Download RAW message or body]


----- Original Message -----
From: "Tina Bird" <tbird@precision-guesswork.com>
To: "Log Analysis Mailing List" <loganalysis@securityfocus.com>
Sent: Monday, January 28, 2002 2:43 PM
Subject: [logs] RE: log retention periods (fwd)


>
> On Fri, 28 Dec 2001 Bonny_Allen@doh.state.fl.us wrote:
>
> > Hello Tina Bird:
> >
> > I got your name and contact information from the LogAnalysis bulletin
> board
> > sponsored by Security Focus.
> >
> > I'm researching computer network/system log retention periods -
> specifically
> > what length time periods are recommended
> > to state agencies for retaining the following types of logs from their
> > computer network system:

Depends on what legal requirements they are intended to meet.

In your case I would worry more about HIPAA compliance and being able to
prove how secure and reliable the audit process is rather than how long it
must be maintained forunless you are tryingh to set that said same standard.

I would think that your local Secretary of State(SOS) or the Attorney's in
the SOS's office should be able to give you the guidelines you need here.
Otherwise check with the people that run your Statewide Criminal Services
Data Base and see what their retention policies are.  The check with teh
Bureau for those for NCIC and you will probably have your answers.!


Todd


> >
> > Internal
> > Windows NT System Event logs
> > Email records
> > Internet Usage Monitoring Software
> > Remote Access logs
> > Network Edge routers
> > Database transactional logs
> >
> > External
> > Firewall logs
> > Intrusion detection software
> >
> > The goal being to have these logs available should law enforcement need
> > them. Do you know of any such recommendations?
> >
> > Any information, references or contacts you can provide would be greatly
> > appreciated.
> >
> > Bonny Allen
> > Inspector Specialist
> > Office of the Inspector General
> > Florida Department of Health
> > Phone (850) 245-4444 x 2151  SC 205-4444 x 2151
> > Fax (850) 413-8985 Fax SC 293-8985
> > Bonny_Allen@doh.state.fl.us
> >
> >
> >
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: loganalysis-unsubscribe@securityfocus.com
> For additional commands, e-mail: loganalysis-help@securityfocus.com
>


---------------------------------------------------------------------
To unsubscribe, e-mail: loganalysis-unsubscribe@securityfocus.com
For additional commands, e-mail: loganalysis-help@securityfocus.com

[prev in list] [next in list] [prev in thread] [next in thread]