PCI DSS v4.0/Requirement 01: Install and Maintain Network Security Controls/6 of 250
1.2.4Network security controls (NSCs) are configured and maintained
Control family: Requirement 01: Install and Maintain Network Security Controls
Control description
Defined Approach Requirements:
An accurate data-flow diagram(s) is maintained that meets the following:
- shows all account data flows across systems and networks.
- updated as needed upon changes to the environment.
Defined Approach Testing Procedures:
1.2.4.a Examine data-flow diagram(s) and interview personnel to verify the diagram(s) show all account data flows in accordance with all elements specified in this requirement.
1.2.4.b Examine documentation and interview responsible personnel to verify that the data-flow diagram(s) is accurate and updated when there are changes to the environment.