Access to the logged information is limited to the persons responsible for monitoring under Article 30, for resolving network and information security incidents, and for detecting and investigating serious crimes and the computer crimes in Articles 319a to 319e of the Penal Code under the Cybersecurity Act; all such access is read-only. The logs are archived and kept for no less than twelve months in accordance with the backup and archiving rules in Article 32. The entity must be able to correlate log information from different sources and analyse it to detect events affecting network and information security.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.