Are there documents on how to set up auditing for PCI compliance 10?
Documentation or how to set up/configure auditing for PCI compliance ... PCI DSS Requirement 10.1 and 10.2.1-10.2.7
- All individual access to cardholder data
- All actions taken by any individual with root or administrative privileges
- Access to all audit trails
- Invalid logical access attempts
- Use of and changes to identification and authentication mechanisms, including:
- All elevation of privileges.
- All changes, additions, or deletions to any account with root or administrative privileges.
- Initialization of audit logs.
- Stopping or pausing of audit logs.
- Creation and deletion of system level objects.
0