Ensure Adequate Audit Log Storage Here's a pattern that repeats in incident after incident. The investigation finally pinpoints the moment that matters, everyone goes to pull the logs for that date, and they're gone. Not deleted by an attacker. They simply aged out, because storage was sized to hold a few weeks and the intrusion started months earlier. Control 8.3 is about making sure the evidence is still there when you finally go looking for it. This is the third piece of the logging story....