IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
Appropriation of log data
In accordance with the almost fully identical data privacy regulations
applicable on the federal and state levels, log data are largely immune to
appropriation (e.g. § 14 Sec. 4 and § 31 BDSG, § 13 Abs. 5 HDSG). Such data
must only be used for the purposes for which they were originally saved.
These purposes usually consist of general monitoring tasks specified in a
security concept, ”checks for the proper usage of programs for processing
person related data” stipulated by most data security laws (for example, refer
to § 18 Sec. 2 BDSG, § 8 Abs. 3 LDSG-SH) and monitoring by internal or
external data security officers. Only in exceptional cases do locally applicable
regulations allow the appropriation of such data for other purposes such as
criminal prosecution.
Storage period
Unless specified otherwise by locally applicable regulations, the storage
period for logs is defined by the deletion guidelines forming part of generally
applicable data privacy laws. The ”fulfilment of responsibilities” is used as a
yardstick here. If no compelling reasons exist for the further retention of log
data, these must be deleted by law (for example, refer to § 20 Sec. 2 BDSG).
The following factors serve as orientation here:
- The probability that irregularities might still be detected
- The possibility of ascertaining the reasons for such irregularities using the
logs and other documents
Empirical results have shown that a retention period of one year is sufficient
here.
Shorter retention periods should be considered for logs which are prepared for
the purpose of selective checks. Storage up to the point of actual checking is
usually adequate. Here, too, locally applicable regulations must be observed.
Basic technical and organisational requirements
The effectiveness of logging and its evaluation as part of monitoring depends
decisively on technical and organisational conditions. In this context, the
following aspects should be considered:
- A review concept should be prepared for the purpose of clearly defining
the purpose of the logs and their monitoring functions, as well as security
mechanisms for the rights of users and other people involved.
- Measures must be taken to ensure the inevitability and completeness of the
logging functions, and to safeguard entries in the log files against
manipulation.
- In accordance with the degree of appropriation applicable to the data stock,
effective access restrictions must be implemented.
- The logs must be designed to allow effective checking. This also includes
IT-supported evaluations.
- Possibilities of evaluation should be ascertained and stipulated at the start.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000