Záznamy událostí: stanovení doby uchování a implementace komplexních požadavků v organizaci
Event Records: Determining Retention Periods and Implementing Complex Requirements in an Organization

Summary/Abstract: Security Information and Event Management (SIEM) is a standard part of the infrastructure of many organizations. These are tools used to monitor the operation of systems and networks, to correlate events, and to store this data for later use. It is a way to collect and consolidate event logs and other relevant information from various sources. In essence, SIEM enables a more flexible response to cyber events and incidents, while also contributing to more efficient management of operated systems and networks. Organizations may implement SIEM, among other reasons, to comply with applicable legislative requirements (e.g., the obligation to monitor and evaluate cybersecurity incidents). This involves many problematic aspects that can be difficult to identify, both for IT professionals working with these tools and for legal experts, who may not always be aware of the complexity of the technological solution. The text focuses on interpreting and implementing legislative requirements that affect SIEM, enabling its use while minimizing the legal risk arising from insufficient implementation. The aim is to (1) define the requirements arising from overlapping legislation in the areas of cybersecurity, personal data protection, and electronic communications, (2) identify areas where they overlap or are in conflict, and (3) propose procedures to ensure SIEM compliance with legal requirements.

• Details
• Contents