An application generates audit logs of operational activities. Compliance requirements mandate that the application retain the logs for 5 years.How can these requirements be met?