PCI (Payment Card) Requirement and ExamDiff

[markscohen]

I am wondering if ExamDiff can assist with addressing a tricky PCI (Payment Card Industry) requirement, specifically item 10.5.5. It calls for the use of change detection software that can tell if the only changes to a file are the results of new data being added at the end. Appending data should not cause an alert, but any other change should. This is to ensure integrity of log data, where adding new data is typically OK but any change to existing older data is cause for concern. I am using file integrity software to ensure checksums of particular files have not been changed, but doing so does not help with this special case of file change detection. Thanks in advance!

[psguru]

ExamDiff Pro cannot distinguish between these types of addition, so I afraid it cannot help with your requirement. It can only distinguish between additions, deletions, and changes.