250 controls · 12 families Unanswered

Requirement 01: Install and Maintain Network Security Controls19

Open Requirement 01: Install and Maintain Network Security Controls

Requirement 02: Apply Secure Configurations to All System Components11

Open Requirement 02: Apply Secure Configurations to All System Components

Requirement 03: Protect Stored Account Data29

Open Requirement 03: Protect Stored Account Data

Requirement 04: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks6

Requirement 05: Protect All Systems and Networks from Malicious Software13

Open Requirement 05: Protect All Systems and Networks from Malicious Software

Requirement 06: Develop and Maintain Secure Systems and Software19

Open Requirement 06: Develop and Maintain Secure Systems and Software

Requirement 07: Restrict Access to System Components and Cardholder Data by Business Need to Know12

Open Requirement 07: Restrict Access to System Components and Cardholder Data by Business Need to Know

Requirement 08: Identify Users and Authenticate Access to System Components29

Open Requirement 08: Identify Users and Authenticate Access to System Components

Requirement 09: Restrict Physical Access to Cardholder Data27

Open Requirement 09: Restrict Physical Access to Cardholder Data

Requirement 10: Log and Monitor All Access to System Components and Cardholder Data27

Open Requirement 10: Log and Monitor All Access to System Components and Cardholder Data

Requirement 11: Test Security of Systems and Networks Regularly21

Open Requirement 11: Test Security of Systems and Networks Regularly

Requirement 12: Support Information Security with Organizational Policies and Programs37

Open Requirement 12: Support Information Security with Organizational Policies and Programs

PCI DSS v4.0/Requirement 04: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks/63 of 250

4.2.1.1PAN is protected with strong cryptography during transmission

Control family: Requirement 04: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks

Control description

Defined Approach Requirements:

An inventory of the entity’s trusted keys and certificates used to protect PAN during transmission is maintained.

Defined Approach Testing Procedures:

4.2.1.1.a Examine documented policies and procedures to verify processes are defined for the entity to maintain an inventory of its trusted keys and certificates.

4.2.1.1.b Examine the inventory of trusted keys and certificates to verify it is kept up to date.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.