PCI Compliance

Demonstrating PCI Compliance and Proficiency

Log Management for PCI audits is daunting and implementing integrity controls is a significant technical challenge. For most PCI solutions, getting the wide variety of operational and security data types with a myriad of formats into a PCI solution requires data normalization. This activity can require constant maintenance and can quickly become someone's full-time job. This is particularly problematic when custom applications that may be running in a virtualized infrastructure are in-scope for PCI. Splunk's ability to index any machine generated data lets you focus more on analysis and less on data collection and normalization.

The Splunk App for PCI Compliance

The Splunk App for PCI Compliance is built on top of the Splunk Enterprise big data analytics and statistical analysis platform for machine generated data. Unlike most security and information event management (SIEM) products that supply their PCI solution as a stack of additional reports, the App is purpose-built to organize and visualize data from systems in-scope specifically for PCI. The PCI App is provided as a powerful yet simple to use solution with incident review workflow, asset prioritization and requirement scorecards for businesses that may be using PCI as their security policy and need to be focused on PCI compliance.

This solution is for the business that needs to demonstrate ad-hoc search capabilities, reporting flexibility, and mature processes for remediation of PCI issues in addition to PCI's prescribed requirements. Businesses of all sizes will benefit from the solution's ability to operationalize PCI and make it an integral part of their security strategy.

Solution Benefits

• Out-of-the-box content for real-time continuous monitoring of enterprise PCI DSS posture
• High-level scorecards and reports for each PCI requirement
• Simple visualizations indicating PCI compliance issues
• Prioritization of in-scope assets
• Addresses operational, security, and incident review and workflow capabilities
• Audit trail for log review and report accesses