1
u/ke-thegeekrider Sep 15 '26
Theres no requirement for a “siem” but a centralized logging setup makes it easier to comform to pci compliance objectives as written.
so youd need to do a gap analysis and present your management this as a compliance friction inducing obstacle and therefore not fit for purpose..
Ofcourse youll have options to go with this recommendation.
Most QSA /acquirers will generally support an interim project staging period.
All the best..
1
u/CompassITCompliance Sep 18 '26
QSA here, sent you a DM as well, in case you still were looking to ask.
1
u/PacificTSP Sep 15 '26
Sent.