Severity :
...
Low
Description : Audit logs should be kept for as long as internal compliance requires. If no requirements exist, best practices suggest a minimum of 365 days.
Remediation Steps : Ensure that the audit log retention period is configured correctly.