What is PCI DSS Log Monitoring & Management?
The Payment Card Industry Data Security Standard (PCI DSS) applies to any organisation that processes, stores or transmits cardholder data. PCI DSS includes requirements for system monitoring and logging and specifies rules concerning the collection, review, retention and destruction of system logs.
Overview of our service
We provide market leading technology, combined with implementation and managed services to enable our clients to satisfy the security monitoring and log management requirements of PCI DSS, usually in the context of a broader information security strategy.
Key service attributes
- Real-time detection, alert and response
- Multi vendor and platform support
- 250+ pre-defined report templates including PCI DSS Compliance Reports
- Attack correlation of logs from multiple sources
- Smart utilisation of bandwidth
Our fully-managed PCI DSS log monitoring and management services are designed to automatically collect and store security events from key points across the network, correlate the data and provide both automated and human analysis of security threats. We provide tiered service levels ranging from simple daily analysis of event logs to 24X7 real time monitoring of events. This coupled with log storage option of one year with three months of online availability enables compliance to PCI requirements.
This service is run from a fully-established, ISO27001 certified Security Operations Centre (SOC) The architecture of our security monitoring service collects, normalises, aggregates, filters and correlates millions of events from thousands of assets across the customer's network into a manageable stream of data, which is then prioritised according to risk levels. The events are then analysed in order to minimise false positives and false negatives, enabling a high degree of accuracy in identifying intrusion events and other security incidents.
PCI DSS specifies several security requirements relating to security log monitoring and management. Our services enable compliance with the specific PCI DSS requirements below:
- Enable logging of events along with the details for each event as given in requirement 10
- Log analysis with tiered service levels ranging from real time to once in a day
- Log storage for one year with 3 months of online availability
- Tamper resistant storage of logs
- Reports, alerts and dashboards to comply with monitoring areas specified in PCI DSS requirements.
A sample list of PCI DSS Compliance Reports is provided below:
- Firewall rule base changes
- Unauthorized access attempts to sensitive file data
- Vendor access to system during non-permitted time periods
- User IDs created
- User IDs deleted
- User IDs modified
- Account lockouts
- Top IDS events
What you receive
- Log baselines in compliance with PCI DSS requirements
- Log storage for one year with online availability for 3 months
- PCI DSS compliance alerts, reports and dashboards
- Event-based trend analysis, with root cause analysis for long-term measures
What to do next
Contact us on 0844 488 0964, email us at info@securityalliance.co.uk or complete our Enquiry Form to discuss requirements, get an online demonstration, request a sample report or arrange a meeting.