RE: Security Audit Journals

Larry,
Most customers I talk to (of your size) try to keep 30 days online.  I have
had some keep more than 90 days, and a few that could only keep 1 day
because of DASD limitations (i.e. no budget for DASD).

Hope all is well with you.

Matt Graybiel
WW iSeries Security Engineer
NetIQ (*VENDOR*)



message: 3
date: Tue, 7 Mar 2006 14:33:44 -0600 
from: "Ketzes, Larry" <Larry.Ketzes@xxxxxxx>
subject: Security Audit Journals

Folks:  How long are you retaining your security audit journal receivers? I
am retaining 3 months, and I'm not sure if this is the norm or best
practice.  I am in the midst of creating our policy, and I am curious to
others view on this.

 

Thanks, Larry

 

======================

Larry Ketzes
Senior Security Project Analyst
American Life Insurance Company

One ALICO Plaza
600 King Street
Wilmington, DE 19801
Phone: 302-594-2146
Mobile: 302-559-1631
Email: larry.ketzes@xxxxxxx <mailto:larry.ketzes@xxxxxxx>