250 controls · 12 families Unanswered

Requirement 01: Install and Maintain Network Security Controls19

Open Requirement 01: Install and Maintain Network Security Controls

Requirement 02: Apply Secure Configurations to All System Components11

Open Requirement 02: Apply Secure Configurations to All System Components

Requirement 03: Protect Stored Account Data29

Open Requirement 03: Protect Stored Account Data

Requirement 04: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks6

Requirement 05: Protect All Systems and Networks from Malicious Software13

Open Requirement 05: Protect All Systems and Networks from Malicious Software

Requirement 06: Develop and Maintain Secure Systems and Software19

Open Requirement 06: Develop and Maintain Secure Systems and Software

Requirement 07: Restrict Access to System Components and Cardholder Data by Business Need to Know12

Open Requirement 07: Restrict Access to System Components and Cardholder Data by Business Need to Know

Requirement 08: Identify Users and Authenticate Access to System Components29

Open Requirement 08: Identify Users and Authenticate Access to System Components

Requirement 09: Restrict Physical Access to Cardholder Data27

Open Requirement 09: Restrict Physical Access to Cardholder Data

Requirement 10: Log and Monitor All Access to System Components and Cardholder Data27

Open Requirement 10: Log and Monitor All Access to System Components and Cardholder Data

Requirement 11: Test Security of Systems and Networks Regularly21

Open Requirement 11: Test Security of Systems and Networks Regularly

Requirement 12: Support Information Security with Organizational Policies and Programs37

Open Requirement 12: Support Information Security with Organizational Policies and Programs

PCI DSS v4.0/Requirement 04: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks/60 of 250

4.1.1Processes and mechanisms for protecting cardholder data with strong cryptography during transmission over open, public networks are defined and documented

Control family: Requirement 04: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks

Control description

Defined Approach Requirements:

All security policies and operational procedures that are identified in Requirement 4 are:

- Documented.

- Kept up-to-date

- In use.

- Known to all affected parties.

Defined Approach Testing Procedures:

4.1.1 Examine documentation and interview personnel to verify that security policies and operational procedures identified in Requirement 4 are managed in accordance with all elements specified in this requirement.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.