PCI DSS v4.0/Requirement 05: Protect All Systems and Networks from Malicious Software/72 of 250
5.3.1Anti-malware mechanisms and processes are active, maintained, and monitored
Control family: Requirement 05: Protect All Systems and Networks from Malicious Software
Control description
Defined Approach Requirements:
The anti-malware solution(s) is kept current via automatic updates.
Defined Approach Testing Procedures:
5.3.1.a Examine anti-malware solution(s) configurations, including any master installation of the software, to verify the solution is configured to perform automatic updates.
5.3.1.b Examine system components and logs, to verify that the anti-malware solution(s) and definitions are current and have been promptly deployed
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.