| ▲ | niyikiza 9 hours ago | |
Agree ... retention is mandatory. The article argues you should retain authorization artifacts, not just event logs. Logs show what happened. Warrants show who signed off on what | ||
| ▲ | groby_b 9 hours ago | parent [-] | |
FFIEC guidance since '21: https://www.occ.gov/news-issuances/bulletins/2021/bulletin-2... | ||