NERC CIP Rules Out - Logs In!
...ninety days
and
R6.4. The Responsible Entity shall retain all logs specified in Requirement R6 for ninety calendar days
R6.5. The Responsible Entity shall review logs of system events related to cyber security
and maintain records documenting review of logs
So, again: have logs, retain them (" Top 11 Reasons to Collect and Preserve...





