Requirement 10 states: Track and monitor all access to network resources and card holder data
I find this a little vague and I have two questions.
If I don't store card holder data - do I just need to monitor access to networking resources?
When they say "Card holder data" Do they mean, the Card holder data environment or specific records of card holder data? Can anyone clarify?