PCI DSS v4.0/Requirement 05: Protect All Systems and Networks from Malicious Software/77 of 250
5.4.1Anti-phishing mechanisms protect users against phishing attacks
Control family: Requirement 05: Protect All Systems and Networks from Malicious Software
Control description
Defined Approach Requirements:
Processes and automated mechanisms are in place to detect and protect personnel against phishing attacks.
Defined Approach Testing Procedures:
5.4.1 Observe implemented processes and examine mechanisms to verify controls are in place to detect and protect personnel against phishing attacks.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.