Audit logs are copied periodically, but at least once every month, to removable media in encrypted archives. Such encrypted archives are protected with a pass phrase of at least 15 characters.
