User and Entity Behavior Analytics (UEBA)
PCIComplianceHubLast updated
A security approach that leverages machine learning and advanced analytics to identify anomalous behavior and potential threats by analyzing user and system activity. UEBA can help organizations detect and respond to security incidents that may impact PCI DSS compliance.
Applies to. PCI DSS v4.0.1 does not name UEBA. It fits under Requirement 10, which asks for security events and the logs of CDE and critical system components to be reviewed at least once daily, for automated mechanisms to perform those reviews, and for the exceptions and anomalies found to be addressed. UEBA is one way to run that review and surface the anomalies; the standard does not ask for behavioural modelling as such.
Related. Anomaly Detection, Automated Log Review, Security Information and Event Management (SIEM), Monitoring, Insider Threat
Sources. PCI DSS v4.0.1 (June 2024)