EVOQ

Protection of Audit Trail Files (10.5.2)

Securing Cryptographic Key Storage (3.6.3)

File-integrity Monitoring On Logs (10.5.5)

Date and Time is Logged (10.3.3)

Type of Event is Logged (10.3.2)

Success or Failure Indication is Logged (10.3.4)

Logging User Access to Cardholder Data (10.2.1)

GV.OC-01: The organizational mission is understood and informs cybersecurity risk management

ID.IM-01: Improvements are identified from evaluations

RC.CO-03: Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders

8.1 User end point devices - Information stored on, processed by or accessible via user endpoint devices shall be protected.

8.16 Monitoring activities - Networks, systems, and applications shall be monitored for anomalous behavior and appropriate actions taken to evaluate potential information security incidents.

8.3 Information access restriction - Access to information and other associated assets shall be restricted in accordance with the established topic-specific policy on access control.

Utilize an Active Discovery Tool

Use a Passive Asset Discovery Tool

Utilize Automated Software Inventory Tools

Use Behavior-Based Anti-Malware Software

Perform Automated Backups