11.2.1Wireless access points are identified and monitored, and unauthorized wireless access points are addressed

Defined Approach Requirements:

Authorized and unauthorized wireless access points are managed as follows:

- The presence of wireless (Wi-Fi) access points is tested for,

- All authorized and unauthorized wireless access points are detected and identified,

- Testing, detection, and identification occurs at least once every three months.

- If automated monitoring is used, personnel are notified via generated alerts.

Defined Approach Testing Procedures:

11.2.1.a Examine policies and procedures to verify processes are defined for managing both authorized and unauthorized wireless access points with all elements specified in this requirement.

11.2.1.b Examine the methodology(ies) in use and the resulting documentation, and interview personnel to verify processes are defined to detect and identify both authorized and unauthorized wireless access points in accordance with all elements specified in this requirement.

11.2.1.c Examine wireless assessment results and interview personnel to verify that wireless assessments were conducted in accordance with all elements specified in this requirement.

11.2.1.d If automated monitoring is used, examine configuration settings to verify the configuration will generate alerts to notify personnel