In scope systems only, not every log your estate produces.
10.5.1 is twelve months retained, three months immediately available for analysis. Immediately available is the part people miss. Three months has to be searchable without a restore, so tape does not count.
In scope means anything that stores, processes or transmits cardholder data, plus the systems protecting them. Your marketing site is almost certainly out. Your payment application is in.
Scope it carefully, the difference between everything and in scope is usually an order of magnitude in cost.
In scope systems only, not every log your estate produces.
10.5.1 is twelve months retained, three months immediately available for analysis. Immediately available is the part people miss. Three months has to be searchable without a restore, so tape does not count.
In scope means anything that stores, processes or transmits cardholder data, plus the systems protecting them. Your marketing site is almost certainly out. Your payment application is in.
Scope it carefully, the difference between everything and in scope is usually an order of magnitude in cost.