Event logs for Domain Name System services and web proxies are retained for at least 18 months.
Topic
Event log retention
Applicable to
Non Classified, Official, Protected, Secret, Top Secret
History
Priority
recommended
Dec 2024
Removed
The existing control recommending that event logs for Domain Name System services and web proxies are retained for at least 18 months was rescinded.
Mar 2023
Event logs for Domain Name System services and web proxies are retained for at least 18 months.
An existing control relating to the retention period for ‘DNS service and web proxy’ event logs was reworded slightly for consistency of language with the preceding control.
Mar 2022
Domain Name System and web proxy event logs are retained for at least 18 months.
Miscellaneous changes were made to rationale and recommendations throughout the publication to clarify content without changing intent. This included a review from the Guidelines for System Hardening chapter through to the Guidelines for Data Transfers chapter.
2015
Agencies should retain DNS and proxy logs for at least 18 months.
2010
It is recommended agencies retain DNS and proxy logs for at least 18 months.