PCI DSS v4.0/Requirement 11: Test Security of Systems and Networks Regularly/193 of 250
11.1.1Processes and mechanisms for regularly testing security of systems and networks are defined and understood
Control family: Requirement 11: Test Security of Systems and Networks Regularly
Control description
Defined Approach Requirements:
All security policies and operational procedures that are identified in Requirement 11 are:
- Documented.
- Kept up to date.
- In use.
- Known to all affected parties.
Defined Approach Testing Procedures:
11.1.1 Examine documentation and interview personnel to verify that security policies and operational procedures are managed in accordance with all elements specified in this requirement.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.