PCI DSS v4.0/Requirement 11: Test Security of Systems and Networks Regularly/209 of 250
11.4.7External and internal penetration testing is regularly performed, and exploitable vulnerabilities and security weaknesses are corrected
Control family: Requirement 11: Test Security of Systems and Networks Regularly
Control description
Defined Approach Requirements:
Multi-tenant service providers support their customers for external penetration testing per Requirement 11.4.3 and 11.4.4.
Defined Approach Testing Procedures:
11.4.7 Additional testing procedure for multi?tenant service providers only: Examine evidence to verify that multi-tenant service providers support their customers for external penetration testing per Requirement 11.4.3 and 11.4.4.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.