(b) Are policies in that state that unprotected PANs are 4.2 Review policies and procedures not to be sent via end-user messaging technologies? [Review policies in links below. In addition, fill out per your 3rd party vendor.] Maintain a Vulnerability Management Program Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Yes CCW No N/A 5.1 Is anti-virus software deployed on all systems commonly Examine system configurations affected by malicious software? [Fill out per your OST-approved 3rd party vendor.] 5.1.1 Are anti-virus programs capable of detecting, removing, Review vendor documentation and protecting against all known types of malicious Examine system configurations software (for example, viruses, Trojans, worms, spyware, [Fill out per your OST-approved 3rd adware, and rootkits)? vendor.] 5.1. 2 Are periodic evaluations performed to identify and Interview personnel evaluate evolving malware threats in order to confirm [Fill out per your OST-approved 3rd whether those systems considered to not be commonly vendor.] affected by malicious software continue as such? Are all anti-virus mechanisms maintained as follows:
4.2 (b) Are policies in that state that unprotected PANs are not to be sent via end-user messaging technologies? Review policies and procedures [Review policies in links below. In addition, fill out per your 3rd party vendor.] Maintain a Vulnerability Management Program Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A 5.1 Is anti-virus software deployed on all systems commonly affected by malicious software? Examine system configurations [Fill out per your OST-approved 3rd party vendor.] 5.1.1 Are anti-virus programs capable of detecting, removing, and protecting against all known types of malicious software (for example, viruses, Trojans, worms, spyware, adware, and rootkits)? Review vendor documentation Examine system configurations [Fill out per your OST-approved 3rd vendor.] 5.1. 2 Are periodic evaluations performed to identify and evaluate evolving malware threats in order to confirm whether those systems considered to not be commonly affected by malicious software continue as such? Interview personnel [Fill out per your OST-approved 3rd vendor.] Are all anti-virus mechanisms maintained as follows:
saq_c_v3_1_instr.docx