PCI DSS v4.0/Requirement 05: Protect All Systems and Networks from Malicious Software/73 of 250
5.3.2Anti-malware mechanisms and processes are active, maintained, and monitored
Control family: Requirement 05: Protect All Systems and Networks from Malicious Software
Control description
Defined Approach Requirements:
The anti-malware solution(s):
- Performs periodic scans and active or real-time scans. Or,
- Performs continuous behavioral analysis of systems or processes.
5.3.2.a Examine anti-malware solution(s) configurations, including any master installation of the software, to verify the solution(s) is configured to perform at least one of the elements specified in this requirement
5.3.2.b Examine system components, including all operating system types identified as at risk for malware, to verify the solution(s) is enabled in accordance with at least one of the elements specified in this requirement.
5.3.2.c Examine logs and scan results to verify that the solution(s) is enabled in accordance with at least one of the elements specified in this requirement.