By law, how long are companies supposed to keep computer logs?

[FreshPrince]

Does anyone know if there's a law that states how long a company is to keep their:

router logs?
firewall logs?
server security logs?

I heard 2 years, can anyone confirm this with a link?

-FP

 

[EyeMWing]

Logic dictates "No."

 

[FreshPrince]

Originally posted by: EyeMWing
Logic dictates "No."

well, financial institutes are required to keep records for 7 years...so I would think they'd require their network guys to keep their logs for 7 years?

 

[AntiEverything]

They can delete them immediately if they want. There's no requirements for logging.

 

[Phoenix86]

Public company?

See: SARBOX

 

[DaWhim]

Originally posted by: FreshPrince

Originally posted by: EyeMWing
Logic dictates "No."

well, financial institutes are required to keep records for 7 years...so I would think they'd require their network guys to keep their logs for 7 years?

I think 2 or 3 years for email only?

 

[Rapidskies]

You dont have to keep security logs or email by law. In fact alot of companies are now purging there email and only keep it a short time to lessen any liability. The only emails you would have to keep would be the types of records dictated under the sarbannes-oxley sp? law.