Article 9 · Commission Implementing Decision (EU) 2025/1274

Contents

Article 9Logs#

1.The JITs collaboration platform logs, namely infrastructure logs referred to in paragraph 6 of this Article and technical logs referred to in Article 25 of Regulation (EU) 2023/969, shall be securely stored and monitored in the centralised log repository of the JITs collaboration platform.

2.The centralised log repository of the JITs collaboration platform shall be accessible only by eu-LISA.

3.The logs shall be regularly backed up by the platform.

4.The logs shall be stored in a format enabling their analysis, correlation and further processing.

5.Upon expiry of the retention periods referred to in Article 25(2), second subparagraph, of Regulation (EU) 2023/969 and paragraph 8 of this Article, all logs, including the backups, shall be automatically and permanently erased.

6.The infrastructure logs shall concern the centralised information system and the communication software, and shall include all logs that make it possible to monitor the infrastructure, performance and security of the platform.

7.Appropriate technical measures shall be put in place to protect infrastructure logs from modification and unauthorised access.

8.The infrastructure logs shall be kept for one year or for such longer period as required to complete ongoing monitoring procedures.

9.eu-LISA shall be responsible for:

(a)creating a list of staff authorised to access the centralised log repository of the JITs collaboration platform;

(b)specifying logging standards, practices and procedures, including the specific format of the logs and the procedure for sharing them;

(c)inspecting the logs in response to incidents, in a proactive manner, where possible;

(d)carrying out log management tasks such as safe storage, backing up, traceability of log access and protection against unauthorised access; and

(e)erasing the logs.