PCI DSS v4.0/Requirement 01: Install and Maintain Network Security Controls/3 of 250
1.2.1Network security controls (NSCs) are configured and maintained
Control family: Requirement 01: Install and Maintain Network Security Controls
Control description
Defined Approach Requirements:
Configuration standards for NSC rulesets are:
- defined.
- implemented.
- maintained.
Defined Approach Testing Procedures:
1.2.1.a Examine the configuration standards for NSC rulesets to verify the standards are in accordance with all elements specified in this requirement.
1.2.1.b Examine configuration settings for NSC rulesets to verify that rulesets are implemented according to the configuration standards.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.