What technical components are evaluated in the 5651 logging infrastructure?

In the 5651 logging study, the production of internet access records, accurate time information, integrity, accessibility and availability when necessary are evaluated together. Installing a hotspot screen or log device alone does not mean that legal compliance is complete.

First, the usage scenario of the business is determined

The staff network, visitor internet and public access may not have the same technical and institutional context. Who uses which network, current address distribution and recording devices should be determined.

This guide explains whitepaper topics; It does not result in legal classification, a single retention period or definitive compliance for all businesses. The obligations to be applied should be determined by an authorized expert based on current legislation and the actual role of the institution.

Which components in the log chain are examined?

• Internet exit, address distribution and user authentication systems, if any.
• Device clocks and time source used.
• Centralized collection of records and access authorizations.
• Method of integrity checking, protection and export when necessary.
• The warning that will occur when record production stops and the responsible person.

The creation of a record and its ability to be accurately associated with an event on another device are different. Date, time and network information must be verified together.

How to separate hotspot and logging?

The hotspot can offer login or access flow to the user; Keeping accurate records, protecting them and reviewing them are separate components. Just because a product displays a login screen does not prove that it meets all necessary registration and protection conditions.

ITK's IP log signer announcement describes the regulatory change and support status for legacy software. Current compatibility conclusions should not be drawn based on the old product name or the installation video prepared years ago.

Technical reference: ITK — IP log signer announcement.

Which scenario should be tried in technical acceptance?

Controlled access is created for an authorized test user; It is attempted to find records in the relevant time period and associate them with the expected components. It is also checked that the account that does not have registration authorization cannot access it and that the responsible person is informed when the recording production stops.

Do not share records that may contain personal data with more people than necessary. With your current network and usage scenario logging and hotspot infrastructure You may request a technical scope assessment for

Frequently Asked Questions