Breakdown of Existing DSS Logging & Alerting (Non-Server) 5.2 Ensure that all anti-virus mechanisms are maintained as follows: Are kept current. Perform periodic scans. Generate audit logs which are retained per PCI DSS Requirement 10.7. 5.2.d Examine anti-virus configurations, Identify the sample of system components selected including the master installation of the for this testing procedure. software and a sample of system For each item in the sample, describe how anti-virus components, to verify that: configurations, including the master installation of the Anti-virus software log generation is software, verified that: enabled, and; Anti-virus software log generation is enabled, and; Logs are retained in accordance with PCI DSS Requirement 10.7. Logs are retained in accordance with PCI DSS Requirement 10.7. For each relevant system ensure that the anti-malware mechanism is logging (centrally or locally). If locally, ensure that there is sufficient disk space to store 1 year’s worth of logs. Requirement 10.2.3 will apply. Validation Summary: Requirements 10.5.1, 10.5.2, 10.5.3 and 10.5.5 will apply. Requirement 10.6.x will apply. Log Centralisation: Not required, but 10.5.3 applies. Log Review: Not specified, but 10.6.1 (or 10.6.2) and 10.6.3 should apply. Event Alerting: Not required. Incident Response: Not specified, but 12.10.1 applies.
5.2 Ensure that all anti-virus mechanisms are maintained as follows: Are kept current. Perform periodic scans. Generate audit logs which are retained per PCI DSS Requirement 10.7. 5.2.d Examine anti-virus configurations, including the master installation of the software and a sample of system components, to verify that: Anti-virus software log generation is enabled, and; Logs are retained in accordance with PCI DSS Requirement 10.7. Identify the sample of system components selected for this testing procedure. For each item in the sample, describe how anti-virus configurations, including the master installation of the software, verified that: Anti-virus software log generation is enabled, and; Logs are retained in accordance with PCI DSS Requirement 10.7. Breakdown of Existing DSS Logging & Alerting (Non-Server) Validation Summary: For each relevant system ensure that the anti-malware mechanism is logging (centrally or locally). If locally, ensure that there is sufficient disk space to store 1 year’s worth of logs. Requirement 10.2.3 will apply. Requirements 10.5.1, 10.5.2, 10.5.3 and 10.5.5 will apply. Requirement 10.6.x will apply. Log Centralisation: Not required, but 10.5.3 applies. Log Review: Not specified, but 10.6.1 (or 10.6.2) and 10.6.3 should apply. Event Alerting: Not required. Incident Response: Not specified, but 12.10.1 applies.