PCI DSS v4.0/Requirement 01: Install and Maintain Network Security Controls/16 of 250
1.4.4Network connections between trusted and untrusted networks are controlled
Control family: Requirement 01: Install and Maintain Network Security Controls
Control description
Defined Approach Requirements:
System components that store cardholder data are not directly accessible from untrusted networks.
Defined Approach Testing Procedures:
1.4.4.a Examine the data-flow diagram and network diagram to verify that it is documented that system components storing cardholder data are not directly accessible from the untrusted networks.
1.4.4.b Examine configurations of NSCs to verify that controls are implemented such that system components storing cardholder data are not directly accessible from untrusted networks.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.