4.1.1 Are industry best practices used to implement strong Review documented standards encryption for authentication and transmission for wireless Review wireless networks networks transmitting cardholder data or connected to the Examine system configuration cardholder data environment? settings Are PANs rendered unreadable or secured with strong 4.2 Observe processes cryptography whenever they are sent via end-user Review outbound messaging technologies (for example, e-mail, instant transmissions messaging, SMS, chat, etc.)? Are policies in that state that unprotected PANs are Review policies and not to be sent via end-user messaging technologies? procedures 4.3 Are security policies and operational procedures for Review security policies and transmissions of cardholder data: operational procedures Documented Interview personnel In use Known to all affected parties? Maintain a Vulnerability Management Program Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Not Yes CCW No N/A Tested 5.1 Is anti-virus software deployed on all systems commonly Examine system configurations affected by malicious software?
4.1.1 Are industry best practices used to implement strong encryption for authentication and transmission for wireless networks transmitting cardholder data or connected to the cardholder data environment? Review documented standards Review wireless networks Examine system configuration settings 4.2 Are PANs rendered unreadable or secured with strong cryptography whenever they are sent via end-user messaging technologies (for example, e-mail, instant messaging, SMS, chat, etc.)? Observe processes Review outbound transmissions Are policies in that state that unprotected PANs are not to be sent via end-user messaging technologies? Review policies and procedures 4.3 Are security policies and operational procedures for transmissions of cardholder data: Documented In use Known to all affected parties? Review security policies and operational procedures Interview personnel Maintain a Vulnerability Management Program Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A Not Tested 5.1 Is anti-virus software deployed on all systems commonly affected by malicious software? Examine system configurations
PCI-DSS-v3_2-SAQ-D_Merchant-rev1_1.docx