CERT-In 180-Day Log Retention Violation
CERT-In mandates that security logs must be retained for a minimum of 180 days within Indian jurisdiction. Insufficient log retention impairs forensic investigation.
Overview
CERT-In requires all organizations to retain security logs for minimum 180 days within Indian jurisdiction. DPDP Act extends this to 1 year for personal data access logs.
Impact
Audit failure, inability to support forensic investigation, CERT-In compliance violation.
Remediation
Configure centralized log management with 180-day retention, ensure storage within India, and implement immutable logging.
Deploy centralized SIEM with 180-day+ retention
Ensure log storage servers are within India
Use write-once immutable storage for integrity
Document log sources, formats, and retention policies
Related SuperClue scanner checks
These scanner checks look for signs of CERT-In 180-Day Log Retention Violation. What a scan can confirm from outside depends on your application.
Scan a domain you have verified with up to 350 modules, paid in credits.
See how website scanning works