PCI DSS v4.0/Requirement 10: Log and Monitor All Access to System Components and Cardholder Data/181 of 250
10.4.1Audit logs are reviewed to identify anomalies or suspicious activity
Control family: Requirement 10: Log and Monitor All Access to System Components and Cardholder Data
Control description
Defined Approach Requirements:
The following audit logs are reviewed at least once daily:
- All security events.
- Logs of all system components that store, process, or transmit CHD and/or SAD.
- Logs of all critical system components.
- Logs of all servers and system components that perform security functions (for example, network security controls, intrusion-detection systems/intrusion-prevention systems (IDS/IPS), authentication servers).
Defined Approach Testing Procedures:
10.4.1.a Examine security policies and procedures to verify that processes are defined for reviewing all elements specified in this requirement at least once daily.
10.4.1.b Observe processes and interview personnel to verify that all elements specified in this requirement are reviewed at least once daily.