Data retention/disposal policies

[dalmada]

Hi,

Does anyone knows some good links to Data retention/disposal policies templates. I have already tried SANS, google, but any luck.

Thanks in advance.

David

[nathancielieska]

If in relation to PCI, its 90 days readily available media (i would classify this as disk) per the latest ROC. Having 90 days worth of log data has helped us get through a PCI audit.