PCI DSS v4.0/Requirement 01: Install and Maintain Network Security Controls/9 of 250
1.2.7Network security controls (NSCs) are configured and maintained
Control family: Requirement 01: Install and Maintain Network Security Controls
Control description
Defined Approach Requirements:
Configurations of NSCs are reviewed at least once every six months to confirm they are relevant and effective.
Defined Approach Testing Procedures:
1.2.7.a Examine documentation to verify procedures are defined for reviewing configurations of NSCs at least once every six months.
1.2.7.b Examine documentation of reviews of configurations for NSCs and interview responsible personnel to verify that reviews occur at least once every six months.
1.2.7.c Examine configurations for NSCs to verify that configurations identified as no longer being supported by a business justification are removed or updated.