Are unnecessary default accounts removed or Review policies and procedures disabled before installing a system on the network? Review vendor documentation Examine system configurations and account settings Interview personnel 2.1.1 For wireless environments connected to the cardholder data environment or transmitting cardholder data, are ALL wireless vendor defaults changed at installations, as follows: Are encryption keys changed from default at Review policies and procedures installation, and changed anytime anyone with Review vendor documentation knowledge of the keys leaves the company or Interview personnel changes positions? Are default SNMP community strings on wireless Review policies and procedures devices changed at installation? Review vendor documentation Interview personnel Examine system configurations Are default passwords/passphrases on access points Review policies and procedures changed at installation? Interview personnel Examine system configurations Is firmware on wireless devices updated to support Review policies and procedures strong encryption for authentication and transmission Review vendor documentation over wireless networks? Examine system configurations Are other security-related wireless vendor defaults Review policies and procedures changed, if applicable? Review vendor documentation Examine system configurations
Are unnecessary default accounts removed or disabled before installing a system on the network? Review policies and procedures Review vendor documentation Examine system configurations and account settings Interview personnel 2.1.1 For wireless environments connected to the cardholder data environment or transmitting cardholder data, are ALL wireless vendor defaults changed at installations, as follows: Are encryption keys changed from default at installation, and changed anytime anyone with knowledge of the keys leaves the company or changes positions? Review policies and procedures Review vendor documentation Interview personnel Are default SNMP community strings on wireless devices changed at installation? Review policies and procedures Review vendor documentation Interview personnel Examine system configurations Are default passwords/passphrases on access points changed at installation? Review policies and procedures Interview personnel Examine system configurations Is firmware on wireless devices updated to support strong encryption for authentication and transmission over wireless networks? Review policies and procedures Review vendor documentation Examine system configurations Are other security-related wireless vendor defaults changed, if applicable? Review policies and procedures Review vendor documentation Examine system configurations
SAQ_B-IP_v3-1.docx