2.1.1 For wireless environments connected to the cardholder data environment or transmitting cardholder data, are ALL wireless vendor defaults changed at installations, as follows: Are encryption keys changed from default at Review policies and procedures installation, and changed anytime anyone with Review vendor documentation knowledge of the keys leaves the company or Interview personnel changes positions? Are default SNMP community strings on wireless Review policies and procedures devices changed at installation? Review vendor documentation Interview personnel Examine system configurations Are default passwords/passphrases on access Review policies and procedures points changed at installation? Interview personnel Examine system configurations Is firmware on wireless devices updated to support Review policies and procedures strong encryption for authentication and Review vendor documentation transmission over wireless networks? Examine system configurations Are other security-related wireless vendor defaults Review policies and procedures changed, if applicable? Review vendor documentation Examine system configurations 2.3 Is non-console administrative access encrypted as follows: Use technologies such as SSH, VPN, or SSL/TLS for web-based management and other non-console administrative access. Is all non-console administrative access Examine system components encrypted with strong cryptography, and is a Examine system configurations strong encryption method invoked before the Observe an administrator log on administrator’s password is requested?
2.1.1 For wireless environments connected to the cardholder data environment or transmitting cardholder data, are ALL wireless vendor defaults changed at installations, as follows: Are encryption keys changed from default at installation, and changed anytime anyone with knowledge of the keys leaves the company or changes positions? Review policies and procedures Review vendor documentation Interview personnel Are default SNMP community strings on wireless devices changed at installation? Review policies and procedures Review vendor documentation Interview personnel Examine system configurations Are default passwords/passphrases on access points changed at installation? Review policies and procedures Interview personnel Examine system configurations Is firmware on wireless devices updated to support strong encryption for authentication and transmission over wireless networks? Review policies and procedures Review vendor documentation Examine system configurations Are other security-related wireless vendor defaults changed, if applicable? Review policies and procedures Review vendor documentation Examine system configurations 2.3 Is non-console administrative access encrypted as follows: Use technologies such as SSH, VPN, or SSL/TLS for web-based management and other non-console administrative access. Is all non-console administrative access encrypted with strong cryptography, and is a strong encryption method invoked before the administrator’s password is requested? Examine system components Examine system configurations Observe an administrator log on
SAQ_B-IP_v3.docx