Article 18 Monitoring

Logs recording the information referred to in Article 34(1) of Regulation (EC) No 767/2008 relating to every access to and all data processing operations within the central VIS shall be kept securely stored on, and accessible from the premises where the principal and backup central VIS sites are located for the period referred to in Article 34(2) of Regulation (EC) No 767/2008.

Procedures for monitoring use or faults in information processing facilities shall be set out in the Security Policy and the results of the monitoring activities reviewed regularly. If necessary, appropriate action shall be taken.

Logging facilities and logs shall be protected against tampering and unauthorised access in order to meet the requirements of collecting and retain for the evidence retention period.