PCI CDE Monitoring Coming soon

Why a separate module

Systems that store, process or transmit card data are held to stricter rules than the rest of the network. Keeping them in their own module means only those systems carry the extra cost, the extra checks are always on for them, and your PCI evidence isn't mixed with everything else.

What it will cover

Mapped to PCI DSS 4.0.1:

• Logging (Requirement 10): logs from every in-scope system kept for 12 months, the latest 3 months searchable, daily review reports, and alerts when an in-scope system stops sending logs.
• Time (10.6): clocks checked against designated time servers, with alerts on drift.
• Change detection (11.5): alerts on unexpected changes to configurations and critical files on in-scope systems.
• Network security controls (1.2): firewall and router rule reviews every six months, with the evidence kept.
• Vulnerability scan tracking (11.3): record and remind quarterly internal and external scans.
• Scope: a clear list of in-scope systems and the segmentation checks that keep everything else out.

Requirements

Needs Compliance & Evidence and Log Intelligence on the same systems.

Pricing

$4 per card-environment system per month, $49 minimum (proposed). Interested? Email sales@uplivra.com to be told when it's ready.