💼 10.3 Audit logs are protected from destruction and unauthorized modifications.

Contextual name: 💼 10.3 Audit logs are protected from destruction and unauthorized modifications.
ID: /frameworks/pci-dss-v4.0/10/03
Located in: 💼 10 Log and Monitor All Access to System Components and Cardholder Data

Description

Empty...

Section	Internal Rules	Policies
💼 10.3.1 Read access to audit logs files is limited to those with a job-related need.
💼 10.3.2 Audit log files are protected to prevent modifications by individuals.	2	4
💼 10.3.3 Audit log files, including those for external-facing technologies, are promptly backed up to a secure, central, internal log server(s) or other media that is difficult to modify.
💼 10.3.4 File integrity monitoring or change-detection mechanisms is used on audit logs to ensure that existing log data cannot be changed without generating alerts.	2	2