Which policy mandates retaining audit trail history for at least one year, with a minimum of three months immediately available for analysis?

Which policy mandates retaining audit trail history for at least one year, with a minimum of three months immediately available for analysis?

• A. Retain audit trails indefinitely.
• B. Retain audit trails for six months.
• C. Retain audit trail history for at least one year, with a minimum of three months readily available for analysis.
• D. Retain online logs for 90 days.

Answer: (C)

The concept being tested is PCI DSS logging and monitoring requirements. PCI DSS mandates retaining audit trail history for at least one year, with the last three months readily available for analysis. This ensures you have enough historical data to investigate incidents and verify activity, while keeping the most recent data quickly accessible for real-time analysis and response. The other options don’t meet this standard: keeping logs indefinitely isn’t the specified requirement, six months falls short of the one-year minimum, and only keeping online logs for 90 days doesn’t satisfy either the duration or the immediate accessibility for the most recent period.

The concept being tested is PCI DSS logging and monitoring requirements. PCI DSS mandates retaining audit trail history for at least one year, with the last three months readily available for analysis. This ensures you have enough historical data to investigate incidents and verify activity, while keeping the most recent data quickly accessible for real-time analysis and response. The other options don’t meet this standard: keeping logs indefinitely isn’t the specified requirement, six months falls short of the one-year minimum, and only keeping online logs for 90 days doesn’t satisfy either the duration or the immediate accessibility for the most recent period.