Tag Info

New answers tagged


I agree with Shane Andrie. Dev machines considered in PCI scope is quite scary. I'd rather look in to moving them out of scope irrespectively of logging requirements. To answer your question: Yes, storing logs centrally is a PCI requirement. Please refer to requirement 10.5 (excl 10.5.5). 10.5.1 Limit viewing of audit trails to those with a job-related ...


Short answer; Yes logs must be retained for a year, and the last 3 months logs must be easy to access. Lots more detail in the link below. Stack Exchange: what logs to retain for pci-dss

Top 50 recent answers are included