The usage of a Security Information and Event Management (SIEM) system is not specifically required by PCI DSS. However, a SIEM can be a useful resource for organizations that adhere to PCI DSS criteria, especially for Requirement 10, which is concerned with monitoring and tracking access to network resources and cardholder data.