RE: Summary of laws related to auditing and logging

The Common Criteria audit requirements are in the functional requirement
documents here:
http://www.commoncriteriaportal.org/public/developer/index.php?menu=2

Most of the audit-specific requirements begin with "FAU" although there
are some audit requirements buried in other sections.

Eric

-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Tina Bird
Sent: Monday, July 09, 2007 7:38 PM
To: [email protected]
Subject: [logs] Summary of laws related to auditing and logging


Hi all - 

I've just finished a stab at a summary of laws and standards related to
IT
auditing and logging:

http://www.splunk.com/base/HOWTOidentifyrelevantdataretentionperiods

(never mind the name in the URL; the article developed a bad case of
scope
creep). 

I'd love comments and additions. In particular, I'm nearly entirely
ignorant
of the current status of such regulations in parts of the world other
than
the U.S. I'll be seeing what I can turn up with Google, but
contributions
from better-educated list members would be much appreciated. Especially
if
they include URLs.

cheers - tbird

_______________________________________________
LogAnalysis mailing list
[email protected]
http://www.loganalysis.org/mailman/listinfo/loganalysis