PCI DSS v4.0/Requirement 10: Log and Monitor All Access to System Components and Cardholder Data/192 of 250
10.7.3Failures of critical security control systems are detected, reported, and responded to promptly
Control family: Requirement 10: Log and Monitor All Access to System Components and Cardholder Data
Control description
Defined Approach Requirements:
Failures of any critical security controls systems are responded to promptly, including but not limited to:
- Restoring security functions.
- Identifying and documenting the duration (date and time from start to end) of the security failure.
- Identifying and documenting the cause(s) of failure and documenting required remediation.
- Identifying and addressing any security issues that arose during the failure.
- Determining whether further actions are required as a result of the security failure.
- Implementing controls to prevent the cause of failure from reoccurring.
- Resuming monitoring of security controls.
Defined Approach Testing Procedures:
10.7.3.a Examine documentation and interview personnel to verify that processes are defined and implemented to respond to a failure of any critical security control system and include at least all elements specified in this requirement.
10.7.3.b Examine records to verify that failures of critical security control systems are documented to include:
- Identification of cause(s) of the failure.
- Duration (date and time start and end) of the security failure.
- Details of the remediation required to address the root cause.