PCI DSS v4.0/Requirement 05: Protect All Systems and Networks from Malicious Software/69 of 250
5.2.2Malicious software (malware) is prevented, or detected and addressed
Control family: Requirement 05: Protect All Systems and Networks from Malicious Software
Control description
Defined Approach Requirements:
The deployed anti-malware solution(s):
- Detects all known types of malware.
- Removes, blocks, or contains all known types of malware.
Defined Approach Testing Procedures:
5.2.2 Examine vendor documentation and configurations of the anti-malware solution(s) to verify that the solution:
Detects all known types of malware.
Removes, blocks, or contains all known types of malware.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.