PCI DSS v4.0/Requirement 01: Install and Maintain Network Security Controls/4 of 250
1.2.2Network security controls (NSCs) are configured and maintained
Control family: Requirement 01: Install and Maintain Network Security Controls
Control description
Defined Approach Requirements:
All changes to network connections and to configurations of NSCs are approved and managed in accordance with the change control process defined at Requirement 6.5.1.
Defined Approach Testing Procedures:
1.2.2.a Examine documented procedures to verify that changes to network connections and configurations of NSCs are included in the formal change control process in accordance with Requirement 6.5.1.
1.2.2.c Examine network configuration settings to identify changes made to configurations of NSCs. Interview responsible personnel and examine change control records to verify that identified changes to configurations of NSCs were approved and managed in accordance with Requirement 6.5.1.