OPS-11—Logging and Monitoring - Metadata Management Concept
>Control Description
Policies and instructions for the secure handling of metadata (usage data) are documented, communicated and provided according to SP-01 with regard to the following aspects:
• Metadata is collected and used solely for billing, incident management and security incident management purposes;
• Exclusively anonymous metadata to deploy and enhance the cloud service so that no conclusions can be drawn about the cloud customer or user;
• No commercial use;
• Storage for a fixed period reasonably related to the purposes of the collection;
• Immediate deletion if the purposes of the collection are fulfilled and further storage is no longer necessary.
• Provision to cloud customers according to contractual agreements.
Additional criteria: Personal data is automatically removed from the log data before the Cloud Service Provider processes it as far as technically possible. The removal is done in a way that allows the Cloud Service Provider to continue to use the log data for the purpose for which it was collected.
Ask AI
Configure your API key to use AI features.