PCI DSS v4.0/Requirement 01: Install and Maintain Network Security Controls/17 of 250
1.4.5Network connections between trusted and untrusted networks are controlled
Control family: Requirement 01: Install and Maintain Network Security Controls
Control description
Defined Approach Requirements:
The disclosure of internal IP addresses and routing information is limited to only authorized parties.
Defined Approach Testing Procedures:
1.4.5.a Examine configurations of NSC's to verify that the disclosure of internal IP addresses and routing information is limited to only authorized parties.
1.4.5.b Interview personnel and examine documentation to verify that controls are implemented such that any disclosure of internal IP addresses and routing information is limited to only authorized parties.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.