Requirement 2: Do not use vendor-supplied defaults for system passwords and security parameters Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Yes CCW No N/A Are vendor-supplied defaults always changed 2.1 Review policies and procedures before installing a system on the network? Examine vendor documentation This applies to ALL default passwords, including but Observe system configurations and not limited to used by operating systems, account settings software that provides security services, application Interview personnel and system accounts, point-of-sale (POS) terminals, Simple Network Management Protocol (SNMP) community strings, etc.). Are unnecessary default accounts removed or Review policies and procedures disabled before installing a system on the Review vendor documentation network? Examine system configurations and account settings Interview personnel [Fill out per your OST-approved 3rd party vendor.] 2.1.1 For wireless environments connected to the cardholder data environment or transmitting cardholder data, are ALL wireless vendor defaults changed at installations, as follows:
Requirement 2: Do not use vendor-supplied defaults for system passwords and security parameters PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A 2.1 Are vendor-supplied defaults always changed before installing a system on the network? This applies to ALL default passwords, including but not limited to used by operating systems, software that provides security services, application and system accounts, point-of-sale (POS) terminals, Simple Network Management Protocol (SNMP) community strings, etc.). Review policies and procedures Examine vendor documentation Observe system configurations and account settings Interview personnel Are unnecessary default accounts removed or disabled before installing a system on the network? Review policies and procedures Review vendor documentation Examine system configurations and account settings Interview personnel [Fill out per your OST-approved 3rd party vendor.] 2.1.1 For wireless environments connected to the cardholder data environment or transmitting cardholder data, are ALL wireless vendor defaults changed at installations, as follows: