2.3.2Wireless environments are configured and managed securely

Defined Approach Requirements:

For wireless environments connected to the CDE or transmitting account data, wireless encryption keys are changed as follows:

- Whenever personnel with knowledge of the key leave the company or the role for which the knowledge was necessary.

- Whenever a key is suspected of or known to be compromised.

Defined Approach Testing Procedures:

2.3.2 Interview responsible personnel and examine key-management documentation to verify that wireless encryption keys are changed in accordance with all elements specified in this requirement.