Can you provide clarification of PCI DSS requirement 10.3.6?
The intent of PCI DSS requirement 10.3.6 is to provide the ability for an organization to identify the data, systems, or components affected when an unauthorized access attempt is being, or has been, logged. PCI DSS requirement 10.3.6 requires organizations to record, in their audit logs, the identity or name of the data, system(s), or component(s) affected by the event being logged.