10.1.2Processes and mechanisms for logging and monitoring all access to system components and cardholder data are defined and documented

Defined Approach Requirements:

Roles and responsibilities for performing activities in Requirement 10 are documented, assigned, and understood.

Defined Approach Testing Procedures:

10.1.2.a Examine documentation to verify that descriptions of roles and responsibilities for performing activities in Requirement 10 are documented and assigned.

10.1.2.b Interview personnel with responsibility for performing activities in Requirement 10 to verify that roles and responsibilities are assigned as defined and are understood.