Which statement describes how time should be acquired, distributed, and stored?

Which statement describes how time should be acquired, distributed, and stored?

• A. Time data should be updated manually every hour.
• B. Time distribution should be done via email.
• C. Time should be synchronized using a vendor-specific tool only.
• D. Time synchronization technology should be used.

Answer: (D)

Coordinating time across all systems is essential for accurate log timestamps and effective incident response. Time synchronization technology provides a centralized, trusted time reference that every device uses to set its clock, so logs from different systems align and can be correlated during investigations. This supports PCI DSS logging and monitoring needs, ensuring audit trails correctly reflect when access to cardholder data and network resources occurred. Manual updates are prone to drift and human error, while distributing time via email isn’t a reliable or secure synchronization method. Relying on a vendor-specific tool alone may not offer a universal, standards-based solution. Using time synchronization technology gives a consistent, automated way to keep clocks in sync across the environment.

Coordinating time across all systems is essential for accurate log timestamps and effective incident response. Time synchronization technology provides a centralized, trusted time reference that every device uses to set its clock, so logs from different systems align and can be correlated during investigations. This supports PCI DSS logging and monitoring needs, ensuring audit trails correctly reflect when access to cardholder data and network resources occurred. Manual updates are prone to drift and human error, while distributing time via email isn’t a reliable or secure synchronization method. Relying on a vendor-specific tool alone may not offer a universal, standards-based solution. Using time synchronization technology gives a consistent, automated way to keep clocks in sync across the environment.