(b) Are policies in that state that unprotected PANs 4.2 Review policies and procedures are not to be sent via end-user messaging technologies? Maintain a Vulnerability Management Program Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Yes CCW No N/A 5.1 Is anti-virus software deployed on all systems commonly Examine system configurations affected by malicious software? 5.1.1 Are anti-virus programs capable of detecting, removing, Review vendor documentation and protecting against all known types of malicious Examine system configurations software (for example, viruses, Trojans, worms, spyware, adware, and rootkits)? 5.1.2 Are periodic evaluations performed to identify and Interview personnel evaluate evolving malware threats in to confirm whether those systems considered to not be commonly affected by malicious software continue as such? 5.2 Are all anti-virus mechanisms maintained as follows: Are all software and definitions kept current? Examine policies and procedures Examine anti-virus configurations, including the master installation Examine system components Are automatic updates and periodic scans enabled Examine anti-virus configurations, and being performed? including the master installation Examine system components
4.2 (b) Are policies in that state that unprotected PANs are not to be sent via end-user messaging technologies? Review policies and procedures Maintain a Vulnerability Management Program Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A 5.1 Is anti-virus software deployed on all systems commonly affected by malicious software? Examine system configurations 5.1.1 Are anti-virus programs capable of detecting, removing, and protecting against all known types of malicious software (for example, viruses, Trojans, worms, spyware, adware, and rootkits)? Review vendor documentation Examine system configurations 5.1.2 Are periodic evaluations performed to identify and evaluate evolving malware threats in to confirm whether those systems considered to not be commonly affected by malicious software continue as such? Interview personnel 5.2 Are all anti-virus mechanisms maintained as follows: Are all software and definitions kept current? Examine policies and procedures Examine anti-virus configurations, including the master installation Examine system components Are automatic updates and periodic scans enabled and being performed? Examine anti-virus configurations, including the master installation Examine system components
PCI_DSS_v3-1_SAQ_A-EP_rev1-1.docx