In terms of the federal government, I think that would fall under the
following citation:

General Records Schedule 20
Electronic Records
1. Files/Records Relating to the Creation, Use, and Maintenance of
Computer Systems, Applications, or Electronic Records. 
c. Electronic files and hard-copy printouts created to monitor system
usage, including, but not limited to, log-in files, password files,
audit trail files, system usage files, and cost-back files used to
assess charges for system use.  

Here is a link to the GRS
http://www.archives.gov/records-mgmt/ardor/grs-index.pdf

Lisa Hawkins, CRM
Information Management Analyst
BWXT Y-12
Information Policy, Records & Document Management
(865) 241-8816


-----Original Message-----
From: Records Management Program [mailto:[log in to unmask]] On
Behalf Of Thys, Robert
Sent: Wednesday, April 04, 2007 10:58 AM
To: [log in to unmask]
Subject: Firewall Logs

What federal or state laws or any regulations or recommendations are
there for the retention of firewall logs and other such log data? What
length of time do other companies retain these records if no such laws
exist? Is the decision to maintain these records based on a company's
need for them? Thank you in advance for any help you can provide me.  
 
Robert Thys
MITRE Corporation
202 Burlington Rd.
Mail Stop D460
Bedford, MA 01730-1420
(781)271-2497
(781)271-3877 Fax
 


 

 

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance