The processing of classification level II–III information must be recorded in an electronic log, information system, case register, or in the information itself (for example, as part of the document). On this topic, there is a recommendation VM 2021:5: Recommendation on the handling of classified documents.
In processing environments of classification levels III and II, the requirement can be met by implementing the following measures:
- clear instructions are provided to relevant personnel regarding the collection, disclosure, and monitoring of log data
- key records are retained for at least 5 years, unless legislation, recommendations, or agreements require a longer retention period; records with very limited significance, for example in the investigation of incidents or in criminal proceedings, may be retained for a shorter period, such as 2-5 years
- log data is regularly backed up
- the clocks of essential information processing systems within the same security area are synchronized with an agreed time source
- there is a method for ensuring the integrity (immutability) of logs
- the use and handling of generated log data are themselves recorded.
