Compliancemanzill.com
PCI DSS v4.0

PCI DSS v4.0/Requirement 05: Protect All Systems and Networks from Malicious Software/72 of 250

5.3.1Anti-malware mechanisms and processes are active, maintained, and monitored

Control family: Requirement 05: Protect All Systems and Networks from Malicious Software

Control description

Defined Approach Requirements:

The anti-malware solution(s) is kept current via automatic updates.

Defined Approach Testing Procedures:

5.3.1.a Examine anti-malware solution(s) configurations, including any master installation of the software, to verify the solution is configured to perform automatic updates.

5.3.1.b Examine system components and logs, to verify that the anti-malware solution(s) and definitions are current and have been promptly deployed

How to implement

Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.