PCI Requirement 10.3.1 – User Identification
PCI v4.0 - 10.3.1: Read Access to Audit Log FIles Is Limited
PCI Requirement 10.3 – Record at Least the Following Audit Trail Entries for All System Components
PCI Requirement 10.3.5 – Origination of Event
PCI Requirement 10.3.4 – Success or Failure Indication
PCI Requirement 10.4 – Using Time-Synchronization Technology, Synchronize All Critical Systems
PCI Requirement 10.2.4 – Invalid Logical Access Attempts
PCI DSS 3.2: Req. 8.3.1
PCI Requirement 10.1 – Implement Audit Trails to Link all Access to System Components
PCI Requirement 8.5.1 – Remote Access to Customer Premises Must Use Unique Authentication
PCI Requirement 11 - Regularly Test Security Systems & Processes
PCI Requirement 8.3.1 – Incorporate Multi-Factor Authentication for All Non-Console Access
PCI Requirement 8.6 – Authentication Mechanisms Must Not Be Shared Among Multiple Accounts
PCI Requirement 10.7 – Retain Audit Trail History for at Least One Year, with Three Months Available
PCI Requirement 9.6 – Maintain Control Over the Internal/External Distribution of Any Kind of Media
PCI Requirement 10.5 – Secure Audit Trails so They Cannot Be Altered
PCI Requirement 10.2.3 – Access to All Audit Trails
PCI Requirement 8.2 – Ensure Proper User-Authentication Management by Something You Know
PCI Requirement 11.2.3 – Perform Internal and External Scans and Rescans as Needed
