---
title: "Keep useful security records"
description: "Keep useful security records, family Detect, NIS2 Art. 21(2)(b)"
url: https://www.alt-f1.be/en/table/lg/
organization: ALT-F1 SRL, Brussels (VAT BE 0830.560.718)
---

# Keep useful security records

Short label: LOGS

Family: Detect · NIS2 Art. 21(2)(b)
<a id="meaning"></a>

## Meaning

Security logs record events such as sign-ins, software activity, website requests and protective actions.

<a id="why"></a>

## Why it matters

Records help explain an incident and check whether a control is working.

<a id="actions"></a>

## What you can do

Choose useful records, restrict access and synchronise clocks. Set retention according to the purpose and applicable requirements.

## Services that can help

Device Shield and Web App Shield produce relevant records and can connect to agreed monitoring tools. Log coverage, access and retention are specified for the service.

- [Device Shield](https://www.alt-f1.be/en/device-shield.md)
- [Web App Shield](https://www.alt-f1.be/en/web-shield.md)

## Official reference — NIS2 Art. 21(2)(b)

> 2. The measures referred to in paragraph 1 shall be based on an all-hazards approach that aims to protect network and information systems and the physical environment of those systems from incidents, and shall include at least the following:
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)

> (b) incident handling;
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)(b)

**What this reference concerns:** When something happens, you must be able to detect it, contain it, fix it and learn from it — people, steps and tools decided in advance.

[Read the article on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555#art_21) · Official text, quoted from the Official Journal of the EU