LogRhythm for PCI DSS Compliance
Payment Card Industry (PCI) Data Security Standard
LogRhythm provides support for PCI compliance out-of-the-box as part of the PCI Compliance Package. The enterprise assets are categorized according to Network Security, Cardholder Data, Vulnerability Management, Access Control, Network Monitoring and Testing,and Information Security Policy. The collection, management, and analysis of log data are integral to meeting PCI audit requirements. IT environments consist of heterogeneous devices, systems, and applications, all reporting log data.
To ensure compliance with PCI requirements, information systems are monitored in real time. Investigations, Reports, and Alarm Rules are provided, allowing for immediate notification and analysis of conditions that are impacting the integrity of the organization’s cardholder data. Areas of non-compliance can be identified in real-time. Additional Investigations, Reports, and Alarm Rules are provided as part of LogRhythm’s standard Knowledge Base to further augment the usefulness of the log data. Reports can be generated as needed by the PCI Security Assessor and scheduled to run at pre-determined intervals.
Download PCI DSS Whitepaper Now 
Requirements
The Payment Card Industry (PCI) Data Security Standard (DSS) was developed to encourage and enhance cardholder data security and facilitate the broad adoption of consistent data security measures globally. The PCI DSS standards apply to all organizations that store, process, or transmit cardholder data and all affected organizations must be PCI compliant.
The PCI DSS standards are enforced by the founding members of the PCI Security Standards Council consisting of American Express, Discover Financial Services, JCB International, MasterCard Worldwide, and Visa Inc. The first PCI DSS standard was released on December 15, 2004 and its latest revision was released on October 1, 2008. LogRhythm is a participating organization in the PCI Security Standards Council and as such, will work with the Council to evolve the PCI Data Security Standard (DSS) and other payment card data protection standards.
Solution Summary
LogRhythm’s PCI DSS Compliance Package provides specific Investigations, Alarms and Reports designed to meet PCI DSS reporting requirements. They are automatically associated with the correct PCI DSS asset categories ensuring only relevant information is included. Reports can be scheduled for periodic generation and delivery or generated on demand by the security officer and other LogRhythm users. Investigations and Alarms can be leveraged for immediate analysis of activities that impact the organization’s cardholder data systems so areas of non-compliance can be identified in real-time.