Blockchain Transaction Lifecycle Security Standard Audit Framework

previous: Tamper-proof Logs | Contents | next: Minimize Personal Information Exposure

Retain Logs

Statement of Requirement

All Actors MUST follow a log retention policy that includes retaining logs for a minimum of 3 years

See it in the specification

Applicability

All roles

Purpose

Ensure that logs provide reliable information for auditing

Audit Procedure

Verify that

• log retention policies provide for a minimum 3 years retention
• retention poilicies are followed in practice

Success Criteria

• Logs are stored following a documented policy, for at least 3 years

Failure Criteria

• There is no log retention policy
• The Log retention policy does not ensure logs are retained for 3 years
• Logs needed to audit another requirement are no longer available, less than 3 years after creation

Key Evidence

• Logs
• Log retention configuration
• System documentation

previous: Tamper-proof Logs | Contents | next: Minimize Personal Information Exposure