Harvard University Information Security | HARVARD.EDU

Handle Security Logs Appropriately

Logs should be stored within a central log server or log storage solution provided by the IaaS/SaaS provider. For on-prem and CloudShield2 services, utilizes HUIT SplunkCloud.

Follow regulated data retention periods when applicable

Examples:

NIST 800-92 - Guidelines

GBLA – 6 Years

HIPAA – 6 Years

SOX – 7 Years

See also: Level 2, Level 3, Level 4, Level 5, Manage All Servers, SC10, Servers C

Information Security Policy

Harvard University

Handle Security Logs Appropriately

View by Category

a5521c6de467d1f1f57b952884f5e43e