If wireless scanning is utilized to identify authorized Examine output from recent wireless and unauthorized wireless access points, is the scan scans performed at quarterly for all system components and facilities? If automated monitoring is utilized (for example, Examine configuration settings wireless IDS/IPS, NAC, etc.), is monitoring configured to generate alerts to notify personnel? 11.1.1 Is an inventory of authorized wireless access points Examine inventory records maintained and a business justification documented for all authorized wireless access points? 11.1.2 Does the incident response plan define and require a Examine incident response plan response in the event that an unauthorized wireless (see Requirement 12.10) access point is detected? Is action taken when unauthorized wireless access Interview responsible personnel points are found? Inspect recent wireless scans and related responses
If wireless scanning is utilized to identify authorized and unauthorized wireless access points, is the scan performed at quarterly for all system components and facilities? Examine output from recent wireless scans If automated monitoring is utilized (for example, wireless IDS/IPS, NAC, etc.), is monitoring configured to generate alerts to notify personnel? Examine configuration settings 11.1.1 Is an inventory of authorized wireless access points maintained and a business justification documented for all authorized wireless access points? Examine inventory records 11.1.2 Does the incident response plan define and require a response in the event that an unauthorized wireless access point is detected? Examine incident response plan (see Requirement 12.10) Is action taken when unauthorized wireless access points are found? Interview responsible personnel Inspect recent wireless scans and related responses
SAQ_C.docx