OCI-006 Oracle Cloud Infrastructure (OCI)

Audit log retention is set to the maximum (365 days).

Audit log retention is set to the maximum (365 days).

Domain: Oracle Cloud Infrastructure (OCI)
Area: Logging
Automated / manual: Automated

Risk if it fails

Short retention destroys forensic evidence.

If logs are kept only briefly, a breach discovered months later has no evidence left — you cannot tell what the attacker did or accessed.

How Tess tests it

1 test — each concludes only on cited evidence.

Audit log retention is set to the maximum (365 days).

Automated

Procedure: Confirm tenancy audit retention-period-days.

Read-only command

oci audit config get --compartment-id <tenancy-ocid>

More in Oracle Cloud Infrastructure (OCI)

OCI-001 MFA is enforced for all IAM users, especially administrators. OCI-002 Customer secret keys / API keys are rotated regularly (<=90 days). OCI-003 A strong password policy is configured. OCI-004 Membership of the Administrators group is minimal.

Want Tess to test OCI-006 against your evidence?