Hi Jari and ALL,
We want to use Apex for some internal app processing. But our info sec officer required it to be PCI-DSS compliant.
These are the compliance requirement:
1. Does it have SSL?
2. Do the users have unique accounts and not shared?
3. Can we enforce password policies?
4. Does it have an audit trail that we can store for at least three months in server
I know that how do do 1-3. But not sure about the 4th. How can I configure or setup the audit trail of user logins?
On the database side user logins are default audited, But how can I do it to Apex users?
Thanks all,
mk