Subject: | |
From: | |
Reply To: | |
Date: | Tue, 7 Mar 2006 16:45:48 -0500 |
Content-Type: | text/plain |
Parts/Attachments: |
|
|
No doubt al y'al have dealt with this in one form or another, but here's
a subset of a frequently covered issue. Systems schedules - namely log
files generated by servers and pcs that are scooped up by a central IT
security panel software/appliance and analyzed for any security issues.
These logs are seen by IT as strictly non-record and internal, yet they
are mandated by SOX to review these logs every year.
Question: are these logs worthy of storage beyond the need of the SOX
audit in order to substantiate the conclusions of the audit or can they
be destroyed after the audit, say after C+1? I suggested to the IT
Security guy that if they are important enough to keep for a SOX audit
they may be important enough to keep for the full 7 years to which he
replied we would need terabytes of storage to keep this stuff.
Have any of you gone through this issue? If so, how?
Ghyslain Sabourin
Director, Records Management
Alliance Atlantis Communications Inc.
This e-mail and any attachment is confidential and may be privileged. Any unauthorized use, disclosure, dissemination or copying of this email is strictly prohibited. If you receive it in error, please advise immediately by return e-mail and delete it. Thank you.Ce courriel et tout annexe sont confidentiels et peut-etre privilegies. Toute utilisation, divulgation, diffusion ou copie non autorisee de ce courriel est strictement interdite. Si vous le recevez par erreur, veuillez nous en aviser immediatement par retour de courriel et effacer le message. Merci.
List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
|
|
|