250 controls · 12 families Unanswered

Requirement 01: Install and Maintain Network Security Controls19

Open Requirement 01: Install and Maintain Network Security Controls

Requirement 02: Apply Secure Configurations to All System Components11

Open Requirement 02: Apply Secure Configurations to All System Components

Requirement 03: Protect Stored Account Data29

Open Requirement 03: Protect Stored Account Data

Requirement 04: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks6

Requirement 05: Protect All Systems and Networks from Malicious Software13

Open Requirement 05: Protect All Systems and Networks from Malicious Software

Requirement 06: Develop and Maintain Secure Systems and Software19

Open Requirement 06: Develop and Maintain Secure Systems and Software

Requirement 07: Restrict Access to System Components and Cardholder Data by Business Need to Know12

Open Requirement 07: Restrict Access to System Components and Cardholder Data by Business Need to Know

Requirement 08: Identify Users and Authenticate Access to System Components29

Open Requirement 08: Identify Users and Authenticate Access to System Components

Requirement 09: Restrict Physical Access to Cardholder Data27

Open Requirement 09: Restrict Physical Access to Cardholder Data

Requirement 10: Log and Monitor All Access to System Components and Cardholder Data27

Open Requirement 10: Log and Monitor All Access to System Components and Cardholder Data

Requirement 11: Test Security of Systems and Networks Regularly21

Open Requirement 11: Test Security of Systems and Networks Regularly

Requirement 12: Support Information Security with Organizational Policies and Programs37

Open Requirement 12: Support Information Security with Organizational Policies and Programs

PCI DSS v4.0/Requirement 04: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks/65 of 250

4.2.2PAN is protected with strong cryptography during transmission

Control family: Requirement 04: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks

Control description

Defined Approach Requirements:

PAN is secured with strong cryptography whenever it is sent via end-user messaging technologies.

Defined Approach Testing Procedures:

4.2.2.a Examine documented policies and procedures to verify that processes are defined to secure PAN with strong cryptography whenever sent over end-user messaging technologies.

4.2.2.b Examine system configurations and vendor documentation to verify that PAN is secured with strong cryptography whenever it is sent via end-user messaging technologies.

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.