Richard
Apologies for the late reply - haven't had a chance to look at this list for
a while. Our Jisc guidance on firewall logs is at
https://community.jisc.ac.uk/library/janet-services-documentation/logfiles-t
echnical-guide
Posts on incident response and the GDPR are at
https://community.jisc.ac.uk/blogs/regulatory-developments?f%5B0%5D=im_field
_tags%3A2704&f%5B1%5D=im_field_tags%3A547. The quick summary is that GDPR
actually strengthens the justification for logging and other security
activities: the recent breach notification guidance from the Article 29 WP
makes it close to mandatory for all data controllers to do that.
And if anyone wants the full legal analysis, see
https://script-ed.org/article/incident-response-protecting-individual-rights
-under-the-general-data-protection-regulation/
Hope that helps
Andrew
-----Original Message-----
From: This list is for those interested in Data Protection issues
<[log in to unmask]> On Behalf Of Richard Thorne (Computer
Services Manager)
Sent: 19 March 2018 18:03
To: [log in to unmask]
Subject: GDPR and firewall logs
?Good evening,
Would any of you care to share your thoughts on maintaining appropriate
firewall logging whilst remaining compliant with GDPR please?
Regards
Richard
________________________________
Richard J. Thorne, FBCS, CITP, CDCM, RITTech
Rheolwr Gwasanaethau Cyfrifiadurol / Computer Services Manager Coleg Gwyr
Abertawe / Gower College Swansea
Heol Tycoch, Abertawe, SA2 9EB / Tycoch Road, Swansea, SA2 9EB Ffôn (RhU) /
Tel. (DDI) +44 (0)1792 284 055 Ffôn symudol gwaith /Tel. (Work Mob.) +44
(0)7557 20 47 67
Ymwadiad - Mae'r e-bost hwn wedi'i fwriadu ar gyfer y
derbynnydd(derbynyddion) yn unig. Os ydych wedi derbyn yr e-bost ar gam,
dylech ddileu pob copi ohono ac unrhyw atodiadau, a thrin y cynnwys fel
cynnwys cyfrinachol. Ymddiheurwn am unrhyw anghyfleustra y gall hyn ei
achosi. Mae'r barnau a safbwyntiau a fynegir yn y neges e-bost hon yn
rhai'r awdur ac ni ddylid cymryd eu bod yn rhai'r coleg. Mae'r e-bost hwn
wedi cael ei wirio gan feddalwedd gwrthfeirysau. Nid yw'r coleg yn cymryd
unrhyw gyfrifoldeb am unrhyw niwed sy'n gysylltiedig â derbyn yr e-bost hwn,
sut bynnag y'i hachosir.
Disclaimer - This email is intended for the addressee(s) only. If however
you have received this email in error, please delete all copies of it and
any attachments, and treat the contents as confidential. We apologise for
any inconvenience this may cause. The views and opinions expressed in this
email message are those of the author and must not be assumed to be those of
the college. This email has been checked by anti-virus software. The college
accepts no liability for any damages related to receipt of this email,
howsoever caused.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask] All user commands
can be found at
https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
Any queries about sending or receiving messages please send to the list
owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your
needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
All archives of messages are stored permanently and are
available to the world wide web community at large at
http://www.jiscmail.ac.uk/lists/data-protection.html
If you wish to leave this list please send the command
leave data-protection to [log in to unmask]
All user commands can be found at https://www.jiscmail.ac.uk/help/subscribers/subscribercommands.html
Any queries about sending or receiving messages please send to the list owner
[log in to unmask]
Full help Desk - please email [log in to unmask] describing your needs
To receive these emails in HTML format send the command:
SET data-protection HTML to [log in to unmask]
(all commands go to [log in to unmask] not the list please)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
|