Which of the following types of events is required to be logged?

Requirement10.2.2mandates that all access to audit trails must be logged. This ensures that any tampering, viewing, or deletion of audit data is traceable. It supports the broader goal of maintaining audit trail integrity and accountability.

Option A:Incorrect. PCI DSS does not require logging use of end-user messaging.

Option B:Incorrect. There’s no explicit requirement to log access to external websites.

Option C:Correct. PCI DSS mandates loggingall access to audit trailsto detect and respond to unauthorised attempts.

Option D:Incorrect. Logging all network transmissions is not feasible and not required.