Is personal firewall software installed and active on 1.4 Review policies and configuration any mobile and/or employee-owned devices that standards connect to the Internet when outside the network (for Examine mobile and/or example, laptops used by employees), and which are devices also used to access the network? Is the personal firewall software configured to specific Review policies and configuration configuration settings, actively running, and not standards alterable by of mobile and/or employee-owned Examine mobile and/or devices? devices 1.5 Are security policies and operational procedures for Review security policies and managing firewalls: operational procedures Documented Interview personnel In use Known to all affected parties?
1.4 Is personal firewall software installed and active on any mobile and/or employee-owned devices that connect to the Internet when outside the network (for example, laptops used by employees), and which are also used to access the network? Review policies and configuration standards Examine mobile and/or devices Is the personal firewall software configured to specific configuration settings, actively running, and not alterable by of mobile and/or employee-owned devices? Review policies and configuration standards Examine mobile and/or devices 1.5 Are security policies and operational procedures for managing firewalls: Documented In use Known to all affected parties? Review security policies and operational procedures Interview personnel
PCI_DSS_v3-1_SAQ_D_Merchant_rev1-1.docx