Section 2: Self-Assessment Questionnaire B-IP Note: The following questions are numbered according to PCI DSS requirements and testing procedures, as defined in the PCI DSS Requirements and Security Assessment Procedures document. Self-assessment completion date: Build and Maintain a Secure Network Requirement 1: Install and maintain a firewall configuration to protect data Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Yes CCW No N/A Is there a current network diagram that documents 1.1.2 Review current network diagram all connections between the cardholder data Examine network configurations environment and other networks, including any wireless networks? Is there a process to ensure the diagram is kept Interview responsible personnel current? Is a firewall required and implemented at each 1.1.4 Review firewall configuration standards Internet connection and between any demilitarized Observe network configurations to verify zone (DMZ) and the internal network zone? that a firewall(s) is in Is the current network diagram consistent with the Compare firewall configuration standards firewall configuration standards? to current network diagram Do firewall and router configuration standards 1.1.6 Review firewall and router configuration include a documented list of services, protocols, standards and ports, including business justification (for example, hypertext transfer protocol (HTTP), Secure Sockets Layer (SSL), Secure Shell (SSH), and Virtual Private Network (VPN) protocols)?
Section 2: Self-Assessment Questionnaire B-IP Note: The following questions are numbered according to PCI DSS requirements and testing procedures, as defined in the PCI DSS Requirements and Security Assessment Procedures document. Self-assessment completion date: Build and Maintain a Secure Network Requirement 1: Install and maintain a firewall configuration to protect data PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A 1.1.2 Is there a current network diagram that documents all connections between the cardholder data environment and other networks, including any wireless networks? Review current network diagram Examine network configurations Is there a process to ensure the diagram is kept current? Interview responsible personnel 1.1.4 Is a firewall required and implemented at each Internet connection and between any demilitarized zone (DMZ) and the internal network zone? Review firewall configuration standards Observe network configurations to verify that a firewall(s) is in Is the current network diagram consistent with the firewall configuration standards? Compare firewall configuration standards to current network diagram 1.1.6 Do firewall and router configuration standards include a documented list of services, protocols, and ports, including business justification (for example, hypertext transfer protocol (HTTP), Secure Sockets Layer (SSL), Secure Shell (SSH), and Virtual Private Network (VPN) protocols)? Review firewall and router configuration standards
SAQ_B-IP_v3-1.docx