|
Article 8
|
(Content and Capacity of Computer Audit Records (Logs))
- A computer audit record (log) generated by the information and communication system shall include information pertaining to the incident such as the type, time, location, and user identification. Day logs are advised to ensure consistency. Other relevant information shall be incorporated in accordance with the information and communication security policy set forth by the organization, laws and regulations, and business needs of the organization.
- The information and communication system shall provide the storage capacity required for storage of computer audit records (logs).
|