Real-time Monitoring
PCIComplianceHubLast updated
The continuous observation and analysis of a system or network to detect and respond to security events as they occur. Real-time monitoring is an important aspect of PCI DSS compliance, as it helps organizations identify and address security threats promptly.
Applies to. PCI DSS v4.0.1 does not use the phrase real-time monitoring. The nearest obligations are the detection mechanisms that must generate alerts (intrusion detection and prevention, change-detection on critical files, the payment page tamper-detection mechanism, wireless detection) and the incident response plan's duty to monitor and respond to those alerts; the anti-malware requirement is the one place the standard says 'real-time', as one option for how scans run. Where the standard fixes a cadence it is at least weekly for the detection mechanisms, and 'promptly' or 'immediately' for acting on alerts.
Limits. Real-time tooling is not itself required; the tested points are the stated cadences and prompt response to alerts.
Related. Monitoring, Security Information and Event Management (SIEM), Intrusion Detection System (IDS), Security Event, Anomaly Detection
Sources. PCI DSS v4.0.1 (June 2024)