← CIS Controls v8 in plain English

8.10 IG2

Control 8 / Audit Log Management

Retain Audit Logs

Think of it likeKeeping your home diary for at least three months before deciding whether to archive or discard it.

In plain English

All recorded events are retained for at least 90 days, giving enough history for any review or investigation.

Related CSF subcategories (unofficial mapping)

PR.PS-04: Log records are generated and made available for continuous monitoring.RS.AN-07: Incident data and metadata are collected, and their integrity and provenance are preserved.