4.1.1 Are industry best practices (for example, IEEE 802.11i) Review documented standards used to implement strong encryption for authentication Review wireless networks and transmission for wireless networks transmitting Examine system configuration settings cardholder data or connected to the cardholder data environment? Note: The use of WEP as a security control is prohibited. Are policies in place that state that unprotected 4.2 Review policies and procedures PANs are not to be sent via end-user messaging technologies? Maintain a Vulnerability Management Program Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Yes CCW No N/A 5.1 Is anti-virus software deployed on all systems commonly Examine system configurations affected by malicious software? 5.1.1 Are anti-virus programs capable of detecting, removing, Review vendor documentation and protecting against all known types of malicious Examine system configurations software (for example, viruses, Trojans, worms, spyware, adware, and rootkits)? 5.1.2 Are periodic evaluations performed to identify and evaluate Interview personnel evolving malware threats in order to confirm whether those systems considered to not be commonly affected by malicious software continue as such? 5.2 Are all anti-virus mechanisms maintained as follows:
4.1.1 Are industry best practices (for example, IEEE 802.11i) used to implement strong encryption for authentication and transmission for wireless networks transmitting cardholder data or connected to the cardholder data environment? Note: The use of WEP as a security control is prohibited. Review documented standards Review wireless networks Examine system configuration settings 4.2 Are policies in place that state that unprotected PANs are not to be sent via end-user messaging technologies? Review policies and procedures Maintain a Vulnerability Management Program Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A 5.1 Is anti-virus software deployed on all systems commonly affected by malicious software? Examine system configurations 5.1.1 Are anti-virus programs capable of detecting, removing, and protecting against all known types of malicious software (for example, viruses, Trojans, worms, spyware, adware, and rootkits)? Review vendor documentation Examine system configurations 5.1.2 Are periodic evaluations performed to identify and evaluate evolving malware threats in order to confirm whether those systems considered to not be commonly affected by malicious software continue as such? Interview personnel 5.2 Are all anti-virus mechanisms maintained as follows:
cash-pic-saq-c-vt-v3.docx