PCI DSS v4.0/Requirement 10: Log and Monitor All Access to System Components and Cardholder Data/182 of 250
10.4.1.1Audit logs are reviewed to identify anomalies or suspicious activity
Control family: Requirement 10: Log and Monitor All Access to System Components and Cardholder Data
Control description
Defined Approach Requirements:
Automated mechanisms are used to perform audit log reviews.
Defined Approach Testing Procedures:
10.4.1.1 Examine log review mechanisms and interview personnel to verify that automated mechanisms are used to perform log reviews.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.