I often get asked for great references for documents that support the compliance with the PCI standards.
Recently, Dr. Anton Chuvakin completed a long (18 parts) dissertation on what it takes to conduct a complete, PCI DSS compliant log review. It has taken me this long to read the whole thing, but I have to admit, I doubt he has missed much of anything.
A client I was working with passed along the whole set of postings and asked me my if it would be good to pass along to their logging and monitoring group as a reference and I had to say that I wholeheartedly agree.
I highly recommend that you read this set of posts to obtain an understanding of logging, why it is important and what constitutes a review.
PCI Guru 
0 Responses to “PCI Logging Reference”