ChatStyle

Staff Training for Breach Response (12.10.4)

Name of Affected Data, System Component, or Resource is Logged (10.3.6)

Administering User Accounts (12.5.4)

Date and Time is Logged (10.3.3)

Personnel Education (12.6.1)

User Identification is Logged (10.3.1)

Success or Failure Indication is Logged (10.3.4)

Security Awareness Program (12.6)

Logging User Access to Cardholder Data (10.2.1)

ID.IM-01: Improvements are identified from evaluations

ID.IM-02: Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties

ID.IM-03: Improvements are identified from execution of operational processes, procedures, and activities

ID.IM-04: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved

PR.AA-01: Identities and credentials for authorized users, services, and hardware are managed by the organization

PR.AA-03: Users, services, and hardware are authenticated

PR.AA-05: Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties