The credit card industry has always has PCI as an auditing group or tool to ensure the safety and accountability when files containing card holder data is ported from end to end sites.The idea is to introduce comprehensive PCI reporting of actions taken within the connect direct application to update, modify, delete and add new items by an administrator.

The credit card industry PCI audits are becoming more intrusive. These audit groups employed by credit card processing companies are doing deep dives into products that handle credit card data and or sensitive information. In the past, the file transfer platforms were considered closed elements that were not as vulnerable as interactive systems or applications,  however, now days it appears, PCI is looking at what Administrators are  doing while supporting these applications and or solutions, that may affect credit card companies and or data. A reporting tool should be deployed that could record actions performed by the administrating team members and the information spooled to a file that can be ingested by a reporting tool like splunk. The solution however, should be pretty generic so any third party monitoring tool can be used. The benifit for such an addition to products like Connect Direct, would allow immediate response to these audits with information that satisfies their reqirements. Example; the solution should record, the administrative users id, the action, like add a node, delete a node, add a user, modify a user, update a node, modify a node, delete nodes and or users, modify the parmlib and any other administrative fuction that maybe deemed as distructive. To include the stopping and starting of the system and any component or partner nodes.