PCI DSS v4.0/Requirement 10: Log and Monitor All Access to System Components and Cardholder Data/178 of 250
10.3.2Audit logs are protected from destruction and unauthorized modifications
Control family: Requirement 10: Log and Monitor All Access to System Components and Cardholder Data
Control description
Defined Approach Requirements:
Audit log files are protected to prevent modifications by individuals.
Defined Approach Testing Procedures:
10.3.2 Examine system configurations and privileges and interview system administrators to verify that current audit log files are protected from modifications by individuals via access control mechanisms, physical segregation, and/or network segregation.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.