OPS-12 Logging and Monitoring - Access, Retention and Deletion

The requirements for the logging and monitoring of events and for the secure handling of cloud service derived data and cloud service provider data (cf. OPS-10, OPS-11) are implemented by technically supported procedures with regard to the following restrictions:

1. Access only for authorised users and systems;

2. Retention for the specified period; and

3. Deletion when further retention is no longer necessary for the purpose of collection.