PCI 3DS Core Security Standard P1-7.2.6: P1-7.2.6 Log retention of one year, three months at hand

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Part 1 Requirement P1-7: Incident response preparedness – PCI 3DS Core Security Standard

• P1-7.1.1 P1-7.1.1 Incident-management policy and procedures
• P1-7.1.2 P1-7.1.2 Incident response plan with its required elements
• P1-7.1.3 P1-7.1.3 Plan reviewed and tested every year
• P1-7.2.1 P1-7.2.1 Audit-logging policy and procedures
• P1-7.2.2 P1-7.2.2 Logs tie access to individuals and record security events
• P1-7.2.3 P1-7.2.3 Clocks synchronised on 3DS systems
• P1-7.2.4 P1-7.2.4 Logs and security events monitored or reviewed
• P1-7.2.5 P1-7.2.5 Audit logs protected from alteration