1. Home
2. Listings
3. PCI DSS Requirement 10

Category: PCI DSS Requirement 10

Log and Monitor All Access to System Components and Cardholder Data

In order to prevent, detect, or minimize the impact of a data breach, logging mechanisms and the capacity to track all user activities are essential. In the event that something goes wrong, comprehensive tracking, alerting, and analysis are made possible by the presence of logs on all system components and in the cardholder data environment (CDE). Without system activity logs, it is difficult, if not impossible, to identify the source of a compromise or breach.

This requirement applies to user actions by employees, contractors, consultants, internal and external vendors, and third parties (such as those providing support or maintenance services) as well as employees and contractors.

It should be noted that consumers/customers/individual cardholders do not have to meet these specific requirements.