Skip to content

Keylogger

What is Keylogger?

Malicious software or hardware that records keystrokes made by a user. Keyloggers are used to capture passwords, credit card numbers, and other sensitive information without the user's knowledge.

Information Security

Frameworks that govern keylogger

PCI DSS v4.0View framework →ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on keylogger

Requirements naming keylogger across 3 standards, quoted from the control text.

CNIL Guidance on Employee Monitoring and Workplace Video Surveillance2 controls

Telework does not change the limits on control. The following are incompatible with the principles: constant video (webcam) or audio surveillance, such as requiring an employee to stay on video all day; permanent screen sharing; keyloggers;

cnil-guidance-on-employee-monitoring-and-workplace-video-surveillance::TLW-1 · TLW-1 Do not monitor teleworkers constantly by webcam, audio, screen sharing, keyloggers or forced presence checks →
MITRE ATT&CK1 control

Track adversary tradecraft via ATT&CK Groups (G-IDs) and Software (S-IDs). 130+ threat groups documented including APT1 (PLA Unit 61398) + APT28 Fancy Bear (Russia GRU) + APT29 Cozy Bear/Midnight Blizzard (Russia SVR) + APT38 Lazarus financial (DPRK) + APT41 W...

MITRE-ATTACK-Threat-Groups-Software-APT28-APT29-APT38-APT41-FIN7-Conti-LockBit-Lazarus-Cobalt-Strike-Mimikatz · MITRE ATT&CK Threat Groups + Software + APT28 + APT29 + APT41 + FIN7 + Conti + Lazarus + Cobalt Strike + Mimikatz →
PCI DSS 4.01 control

The anti-malware solution or solutions deployed must both: identify all known types of malware; and remove, block or contain all known types of malware.

pci-dss-4-0::5.2.2 · 5.2.2 Anti-malware detects and handles all known malware →

Questions people ask about keylogger

What is Keylogger?
Malicious software or hardware that records keystrokes made by a user. Keyloggers are used to capture passwords, credit card numbers, and other sensitive information without the user's knowledge.
Why is Keylogger important for compliance?
Keylogger is a key concept in Information Security. Understanding keylogger helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Keylogger?
Keylogger appears in the requirement text of CNIL Guidance on Employee Monitoring and Workplace Video Surveillance, MITRE ATT&CK, PCI DSS 4.0. Across these standards we have identified 4 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Keylogger?
Explore our compliance framework pages to see how keylogger applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Keylogger applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.