...
When installing or updating ArcSight SmartConnectors (the software which collects and forwards logs to ArcSight), inform the information security team (is_team@tufts.edu) if the data belongs to any of the categories mentioned by the official Tufts Records Retention Schedule. The team will configure the SmartConnector to store data in the appropriate group. You may also request a different data retention period for others reasons, even if there is no policy requirement.
...
- Faculty related logs: No guidelines
- Student records and activity related logs: No guidelines.
- Alumni record and activity related logs: No guidelines.
- Financial, Funding, and Transaction related logs: 365 days
- Staff records, activity and employment related logs: 365 days
- Research related logs: "Until research is complete." Use default of 365 days
- Administrative records: "Until no longer needed." Use default of 365 days
- External connection and traffic related logs: 365 days
- Internal Tufts device, connection, traffic and software usage logs: 90 days
- Security scan related logs: 30 days
Draft Data Retention Policy
Information Security is in the process of drafting a more specific data retention policy specific to the records involves in our daily work. See the attached draft for more details.
| Attachments |
|---|