6. General supervision
6.1. The purpose of supervision is system and network security and is performed by an ICT officer on the instructions of the director ICTS.
6.2. CERT-UT may investigate traffic date in case of a security incident with the only purpose of finding and removing the cause of the incident or limiting the consequential damage of the incident. In this context CERT-UT may impose temporary restrictions upon the user in his or her access to certain ICT facilities. The user is to cooperate in this investigation by providing relevant data and complying with the instructions by CERT-UT.
6.3. Traffic data about the use of ICT and the internet are in principle kept no longer than six months. In the event of a directed investigation as referred to in clause 8, these data can be stored for a longer period, until the necessity for this no longer exists.
6.4. The ICT officer has an obligation to observe secrecy with regard to data on the use of ICT and the internet which are traceable to persons.