PCI DSS v4.0/Requirement 10: Log and Monitor All Access to System Components and Cardholder Data/176 of 250
10.2.2Audit logs are implemented to support the detection of anomalies and suspicious activity, and the forensic analysis of events
Control family: Requirement 10: Log and Monitor All Access to System Components and Cardholder Data
Control description
Defined Approach Requirements:
Audit logs record the following details for each auditable event:
- User identification.
- Type of event.
- Date and time.
- Success and failure indication.
- Origination of event.
- Identity or name of affected data, system component, resource, or service (for example, name and protocol).
Defined Approach Testing Procedures:
10.2.2 Interview personnel and examine audit log configurations and log data to verify that all elements specified in this requirement are included in log entries for each auditable event (from 10.2.1.1 through 10.2.1.7).