The Kinamik Secure Audit Vault helps Italian organizations comply with the Italian Law 196/03, specifically its Annex B:
-
Italian Law 196/03, Annex B
:
The Italian Legislative Decree no. 196, from June 30, 2003 regulates the protection of citizen's personal data. Within this decree, Annex B mandates a series of minimum security measures that must be undertaken to address the law. This annex, the Italian data protection authority, has the obligation to keep records of IT administrators access to protected systems. The authority states that "systems must be in place to log accesses (computer authentication) to processing systems and electronic databases as performed by system administrators". The log's integrity and authenticity must be protected, and accessing them must also be controlled, focusing on "their completeness, non-modifiability and amenability to integrity controls". Finally, it mandates that "access logs must include timestamps and event descriptions", and that "they must be retained for a suitable period which shall not be shorter than six months".
The Kinamik Secure Audit Vault helps addressing these requirements by providing a secure, tamper-evident vault for all access logs processed.
|