Enable VPC Flow Logs for Every Subnet

Ensure that an Expiration Date is Set for All Keys in Non-RBAC Key Vaults

Enable Role Based Access Control (RBAC) for Azure Key Vault

Best Practices for Password Parameters

Defining Roles and Responsibilities in AWS

IAM Policies for Account Authentication

10.6.2 – Review Logs of All Other System Components Based Policies and Risk Management Strategy

PCI Requirement 10.6 – Review Logs and Security Events for All System Components

PCI Requirement 10.5.5 – Use File Integrity Monitoring or Change Detection Software on Logs

PCI Requirement 10.5.3 – Promptly Back Up Audit Trail Files to a Centralized Log Server

PCI Requirement 10.5.1 – Limit Viewing of Audit Trails to Those With a Job Related Need

PCI Requirement 10.5 – Secure Audit Trails So They Cannot Be Altered

PCI Requirement 10.4.2 – Time Data is Protected

Do Not Use Project-Wide SSH Keys When Authenticating Instances

Restrict API Permissions If Using Default Service Accounts

Enable VPC Flow Logs for Every Subnet

Restrict RDP Authorized Access from the Internet

Migrate Away from RSASHA1 for DNSSEC Zone-Signing Keys

PCI Requirement 10.4 – Using Time Synchronization Technology, Synchronize All Critical Systems

PCI Requirement 10.3.6 – Identity or Name of Affected Data, System Component, or Resource

PCI Requirement 10.3.4 – Success or Failure Indication

PCI Requirement 10.3.2 – Type of Event

PCI Requirement 10.3.1 – User Identification

PCI Requirement 10.3 – Record at Least the Following Audit Trail Entries for All System Components

PCI Requirement 10.2.7 – Creation and Deletion of System Level Objects