PCI DSS v4.0/Requirement 10: Log and Monitor All Access to System Components and Cardholder Data/177 of 250
10.3.1Audit logs are protected from destruction and unauthorized modifications
Control family: Requirement 10: Log and Monitor All Access to System Components and Cardholder Data
Control description
Defined Approach Requirements:
Read access to audit logs files is limited to those with a job-related need.
Defined Approach Testing Procedures:
10.3.1 Interview system administrators and examine system configurations and privileges to verify that only individuals with a job-related need have read access to audit log files.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.