← CIS Controls v8 in plain English

8.10

Control 8 / Audit Log Management

Retain Audit Logs

Think of it likeKeeping your home diary for at least three months before deciding whether to archive or discard it.

In plain English

The family ensures that all recorded activities and events (audit logs) are kept for a minimum of 90 days, providing a sufficient historical record for any necessary reviews or investigations.