Skip to main content

πŸ’Ό 10.2.1 Audit logs are enabled and active for all system components and cardholder data.

Description​

Empty...

Similar​

  • Sections
    • /frameworks/pci-dss-v3.2.1/10/02
    • /frameworks/pci-dss-v4.0.1/10/02/01

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό PCI DSS v3.2.1 β†’ πŸ’Ό 10.2 Implement automated audit trails for all system components.779
πŸ’Ό PCI DSS v4.0.1 β†’ πŸ’Ό 10.2.1 Audit logs are enabled and active for all system components and cardholder data.78

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό PCI DSS v3.2.1 β†’ πŸ’Ό 10.2 Implement automated audit trails for all system components.779
πŸ’Ό PCI DSS v4.0.1 β†’ πŸ’Ό 10.2.1 Audit logs are enabled and active for all system components and cardholder data.78

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό 10.2.1.1 Audit logs capture all individual user access to cardholder data.4
πŸ’Ό 10.2.1.2 Audit logs capture all actions taken by any individual with administrative access, including any interactive use of application or system accounts.
πŸ’Ό 10.2.1.3 Audit logs capture all access to audit logs.1
πŸ’Ό 10.2.1.4 Audit logs capture all invalid logical access attempts.4
πŸ’Ό 10.2.1.5 Audit logs capture all changes to identification and authentication credentials.1
πŸ’Ό 10.2.1.6 Audit logs capture all initialization of new audit logs, starting, stopping, or pausing of the existing audit logs.
πŸ’Ό 10.2.1.7 Audit logs capture all creation and deletion of system-level objects.

Policies (2)​

PolicyLogic CountFlags
πŸ“ AWS CloudTrail S3 Bucket Access Logging is not enabled. 🟒1🟒 x6
πŸ“ AWS S3 Bucket Server Access Logging is not enabled 🟒1🟒 x6