In this act Article 12 of 42
Article 12 — Logging
Financial servicesLevel 2RTSDORAIn forceOfficial source
12(1)Copy link
1.Financial entities shall, as part of the safeguards against intrusions and data misuse, develop, document, and implement logging procedures, protocols and tools.
12(2)Copy link
2.The logging procedures, protocols, and tools referred to in paragraph 1 shall contain all of the following:
12(2)(a)
a)the identification of the events to be logged, the retention period of the logs, and the measures to secure and handle the log data, considering the purpose for which the logs are created;
Copy link12(2)(b)
b)the alignment of the level of detail of the logs with their purpose and usage to enable the effective detection of anomalous activities as referred to in Article 24;
Copy link12(2)(c)(i)
i)logical and physical access control, as referred to in Article 21, and identity management;
Copy link12(2)(d)
d)measures to protect logging systems and log information against tampering, deletion, and unauthorised access at rest, in transit, and, where relevant, in use;
Copy link12(2)(f)
f)without prejudice to any applicable regulatory requirements under Union or national law, the synchronisation of the clocks of each of the financial entity’s ICT systems upon a documented reliable reference time source.\
Copy linkFor the purposes of point (a), financial entities shall establish the retention period, taking into account the business and information security objectives, the reason for recording the event in the logs, and the results of the ICT risk assessment.
Section 6 — Network security