FAQ
Which requirements of PCIDSS can be met?
In case of managing your own logs yourself, you can meet the following requirements of PCIDSS
(Logs of your own systems and applications are out of scope)
PCIDSS requirements
10.5 Secure audit trails so they cannot be altered.
10.5.1 Limit viewing of audit trails to those with a job-related need.
10.5.2 Protect audit trail files from unauthorized modifications.
10.5.3 Promptly back up audit trail files to a centralized log server or media that is difficult to alter.
10.7 Retain audit trail history for at least one year, with a minimum of three months immediately available for analysis (for example, online, archived, or restorable from backup).