A method for the protected deposit of event protocol data of a computer system provides access control which prohibits access to event protocol data in the computer system and also performs: reading event protocol data generated in the computer system, sequential assignment of individual data sections of the read event protocol data to one of at least two categories in accordance with predetermined criteria, merging the categorized data sections for each respective category into a sub-file, and separate storage of created sub-files and setting up an access option to access the individual sub-files.