11.6.1Unauthorized changes on payment pages are detected and responded to

Defined Approach Requirements:

A change- and tamper-detection mechanism is deployed as follows:

- To alert personnel to unauthorized modification (including indicators of compromise, changes, additions, and deletions) to the HTTP headers and the contents of payment pages as received by the consumer browser.

- The mechanism is configured to evaluate the received HTTP header and payment page.

- The mechanism functions are performed as follows:

1) At least once every seven days OR

2) Periodically (at the frequency defined in the entity's targeted risk analysis, which isperformed according to all elements specified in Requirement 12.3.1).

Defined Approach Testing Procedures:

11.6.1.a Examine system settings, monitored payment pages, and results from monitoring activities to verify the use of a change- and tamper?detection mechanism.

11.6.1.b Examine configuration settings to verify the mechanism is configured in accordance with all elements specified in this requirement.

11.6.1.c If the mechanism functions are performed at an entity-defined frequency, examine the entity's targeted risk analysis for determining the frequency to verify the risk analysis was performed in accordance with all elements specified at Requirement 12.3.1.

11.6.1.d Examine configuration settings and interview personnel to verify the mechanism functions are performed either:

- At least once every seven days OR

- At the frequency defined in the entity's targeted risk analysis performed for this requirement.