>setting up periodic purges, archives, and such, usually gets pushed to another phase.... which may never come. Isn't that where security compliance programs c

>setting up periodic purges, archives, and such, usually gets pushed to another phase.... which may never come. Isn't that where security compliance programs come into play? I think someone doing their due diligence in asking, "What is the business justification for storing building access logs indefinitely" would have been able to create a procedure for addressing the storage of these types of things.