Sekit CSF · Logging & Monitoring · Policy
RCF-0208Log protection & retention
The company formally defines how long logs must be retained and how they must be protected from tampering
Mapping at a glance
RCF-0208Log protection & retentionLogging & Monitoring · Policy
RCF-0208 maps to 4 controls across the published frameworks. Open in the full graph →
Maps to ISO/IEC 27001:2022
Curated mapping with the reasoning, not just the codes.
A.5.1Policies for information securitysupportsSekit's Log protection and retention policy, one of the topic-specific policies A.5.1 expects, defines how long each log category is kept and what protects it from tampering, even by an attacker with admin rights.A.8.15LoggingenablesDefining in writing how long logs are kept and what protects them from tampering is the policy precondition for A.8.15's protection and retention requirement.
Maps to NIST CSF 2.0
Curated mapping with the reasoning, not just the codes.
Evidence that proves this control
What an auditor, or Sekit's evidence engine, asks for.
Logging and monitoring configuration
How the company collects and keeps activity logs from its systems, and how security alerts are generated and handled.
From the Sekit evidence catalog
This topic through the other lenses
All Logging & Monitoring controls
Ask Sekura: “What evidence proves RCF-0208?”
Also via MCP, free with account