PCI DSS v4.0/Requirement 12: Support Information Security with Organizational Policies and Programs/225 of 250
12.5.1PCI DSS scope is documented and validated
Control family: Requirement 12: Support Information Security with Organizational Policies and Programs
Control description
Defined Approach Requirements:
An inventory of system components that are in scope for PCI DSS, including a description of function/use, is maintained and kept current.
Defined Approach Testing Procedures:
12.5.1.a Examine the inventory to verify it includes all in-scope system components and a description of function/use for each.
12.5.1.b Interview personnel to verify the inventory is kept current.
How to implement
Coming in phase 2Step-by-step guidance for implementing this control on Microsoft Azure, using services such as Azure Policy, Microsoft Defender for Cloud and Entra ID. It will be matched to your environment.