PCI DSS v4.0/Requirement 10: Log and Monitor All Access to System Components and Cardholder Data/169 of 250
10.2.1.1Audit logs are implemented to support the detection of anomalies and suspicious activity, and the forensic analysis of events
Control family: Requirement 10: Log and Monitor All Access to System Components and Cardholder Data
Control description
Defined Approach Requirements:
Audit logs capture all individual user access to cardholder data.
Defined Approach Testing Procedures:
10.2.1.1 Examine audit log configurations and log data to verify that all individual user access to cardholder data is logged.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.