Robert,

I was recently requested to provide a retention schedule for our
county's IT security section on firewall, system and network logs.   In
checking with the State of Florida's Bureau of Archives and Records,
they had nothing on record and so they checked not only the State IT
program but a number of other state agencies around the country.  The
final decision was a 90 retention unless information is required for
litigation support.  AS far as I know, we are the first county in
Florida to make such a request. 

Contact me off line and I will email you the retention code as stated to
use as an example.

Sheila Burns
Clerk's BCC Records Manager
 727.464.5554
[log in to unmask]

-----Original Message-----
From: Records Management Program [mailto:[log in to unmask]] On
Behalf Of Thys, Robert
Sent: Wednesday, April 04, 2007 10:58 AM
To: [log in to unmask]
Subject: [RM] Firewall Logs

What federal or state laws or any regulations or recommendations are
there for the retention of firewall logs and other such log data? What
length of time do other companies retain these records if no such laws
exist? Is the decision to maintain these records based on a company's
need for them? Thank you in advance for any help you can provide me.  
 
Robert Thys
MITRE Corporation
202 Burlington Rd.
Mail Stop D460
Bedford, MA 01730-1420
(781)271-2497
(781)271-3877 Fax
 


 

 

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance