PCI DSS v4.0/Requirement 05: Protect All Systems and Networks from Malicious Software/75 of 250
5.3.3Anti-malware mechanisms and processes are active, maintained, and monitored
Control family: Requirement 05: Protect All Systems and Networks from Malicious Software
Control description
Defined Approach Requirements:
For removable electronic media, the anti-malware solution(s):
- Performs automatic scans of when the media is inserted, connected, or logically mounted. Or
- Performs continuous behavioral analysis of systems or processes when the media is inserted, connected, or logically mounted.
Defined Approach Testing Procedures:
5.3.3.a Examine anti-malware solution(s) configurations to verify that, for removable electronic media, the solution is configured to perform at least one of the elements specified in this requirement.
5.3.3.b Examine system components with removable electronic media connected to verify that the solution(s) is enabled in accordance with at least one of the elements as specified in this requirement.
5.3.3.c Examine logs and scan results to verify that the solution(s) is enabled in accordance with at least one of the elements specified in this requirement.