about BIG-IQ ( or DCD) sizing

Hi guys.   according to NYCRR 500 regulation, security events should be stored for at least 3 years.   one of my customer who runs banking business wonders whether big-iq(or DCD) can store ASM ...