[logs] Log Policy

[Mordechai T. Abzug]

On Thu, Jan 31, 2008 at 11:26:46AM +1000, Greg Vickers wrote:

> I am drafting a Log Policy for the Queensland University of Technology 
> and was wondering if any list members have such a policy (for their 
> organisation or employer) that they would be willing to send me, or to 
> point me at?
> 
> If you know of a good resource, or tips on writing such a policy, please 
> let me know :)

The US has a couple for log-related stuff.

http://csrc.ncsl.nist.gov/publications/nistpubs/800-92/SP800-92.pdf

The US security controls document also includes some recommendations
for logs.

http://csrc.nist.gov/publications/nistpubs/800-53/SP800-53.pdf

- Morty