[READ-ONLY] Archives [RETIRED] PCI DSS v.1.x Questions and Answers

Maintain an Information Security Policy Protect Cardholder Data Regularly Monitor and Test Networks Build and Maintain a Secure Network Appendix A: PCI DSS Applicability for Hosting Prov Implement Strong Access Control Measures Maintain a Vulnerability Management Program

Topic	Replies	Views	Activity
About the [RETIRED] PCI DSS v.1.x Questions and Answers category [RETIRED] PCI DSS v.1.x Questions and Answers	0	99	January 23, 2023
[PCI DSS 1.x] 3.2 Do not store sensitive authentication data after authorization (even if encrypted). Protect Cardholder Data pci-dss-requirement-	4	13716	July 3, 2014
[PCI DSS 1.x] 1.2.3 Install perimeter firewalls between any wireless networks and the cardholder data en Build and Maintain a Secure Network pci-dss-requirement-	2	11352	April 18, 2014
[PCI DSS 1.x] 1.2.1 Restrict inbound and outbound traffic to that which is necessary for the cardholder Build and Maintain a Secure Network pci-dss-requirement-	2	10183	April 18, 2014
[PCI DSS 1.x] 12.1.2 Includes an annual process that identifies threats, and vulnerabilities, and results in a for Maintain an Information Security Policy pci-dss-requirement-	4	8897	February 5, 2014
[PCI DSS 1.x] 3.4 Render PAN, at minimum, unreadable anywhere it is stored (including on portable digita Protect Cardholder Data pci-dss-requirement-	18	34058	January 20, 2014
[PCI DSS 1.x] 12.8.2 Agreement that includes an acknowledgement that the service provider is responsible for the s Maintain an Information Security Policy pci-dss-requirement-	2	6290	January 13, 2014
[PCI DSS 1.x] 8.3 Implement two-factor authentication for remote access to the network by employees, administrato Implement Strong Access Control Measures pci-dss-requirement-	3	16575	January 13, 2014
[PCI DSS 1.x] 1.1.2 Current network diagram with all connections to cardholder data, including any wirel Build and Maintain a Secure Network pci-dss-requirement-	1	9385	January 13, 2014
[PCI DSS 1.x] 2.2.1 Implement only one primary function per server. Build and Maintain a Secure Network pci-dss-requirement-	10	17959	December 11, 2013
[PCI DSS 1.x] 3.6.6 Split knowledge and establishment of dual control of cryptographic keys Protect Cardholder Data pci-dss-requirement-	7	10955	July 3, 2013
[PCI DSS 1.x] 1.3.2 Limit inbound Internet traffic to IP addresses within the DMZ. Build and Maintain a Secure Network pci-dss-requirement-	5	7100	December 28, 2012
[PCI DSS 1.x] 3.6.2 Secure cryptographic key distribution Protect Cardholder Data pci-dss-requirement-	4	7811	March 16, 2012
[PCI DSS 1.x] 10.2.2 All actions taken by any individual with root or administrative privileges Regularly Monitor and Test Networks pci-dss-requirement-	6	12723	March 15, 2012
[PCI DSS 1.x] 11.5 Deploy file integrity monitoring software to alert personnel to unauthorized modification of cr Regularly Monitor and Test Networks pci-dss-requirement-	8	22957	March 8, 2012
[PCI DSS 1.x] 11.3 Perform penetration testing at least once a year and after any significant infrastructure or ap Regularly Monitor and Test Networks pci-dss-requirement-	1	4981	January 25, 2012
[PCI DSS 1.x] 1.1.4 Description of groups, roles, and responsibilities for logical management of network Build and Maintain a Secure Network pci-dss-requirement-	2	9228	December 23, 2011
[PCI DSS 1.x] 12.3.6 Acceptable network locations for the technologies Maintain an Information Security Policy pci-dss-requirement-	2	10098	November 2, 2011
[PCI DSS 1.x] 6.1 Ensure that all system components and software have the latest vendor-supplied securit Maintain a Vulnerability Management Program pci-dss-requirement-	6	13734	October 25, 2011
[PCI DSS 1.x] 6.5 Develop all web applications based on secure coding guidelines. such as the Open Web Application Maintain a Vulnerability Management Program pci-dss-requirement-	1	5086	September 13, 2011
[PCI DSS 1.x] 2.2 Develop configuration standards for all system components. Assure that these standards Build and Maintain a Secure Network pci-dss-requirement-	4	14037	August 19, 2011
[PCI DSS 1.x] 6.5.10 Insecure configuration management Maintain a Vulnerability Management Program pci-dss-requirement-	1	5627	August 2, 2011
[PCI DSS 1.x] 1.3.1 Implement a DMZ to limit inbound and outbound traffic to only protocols that are nec Build and Maintain a Secure Network pci-dss-requirement-	3	8302	July 31, 2011
[PCI DSS 1.x] 1.2.2 Secure and synchronize router configuration files. Build and Maintain a Secure Network pci-dss-requirement-	1	6073	July 31, 2011
[PCI DSS 1.x] 1.3.3 Do not allow any direct routes inbound or outbound for traffic between the Internet Build and Maintain a Secure Network pci-dss-requirement-	3	7428	July 31, 2011
[PCI DSS 1.x] 2.3 Encrypt all non-console administrative access. Use technologies such as SSH, VPN, or S Build and Maintain a Secure Network pci-dss-requirement-	2	11863	July 29, 2011
[PCI DSS 1.x] 10.2 5 Use of identification and authentication mechanisms Regularly Monitor and Test Networks pci-dss-requirement-	8	14905	May 25, 2011
[PCI DSS 1.x] 1.1 Establish firewall and router configuration standards that include the following Build and Maintain a Secure Network pci-dss-requirement-	8	15402	May 16, 2011
[PCI DSS 1.x] 5.1 Deploy anti-virus software on all systems commonly affected by malicious software (par Maintain a Vulnerability Management Program pci-dss-requirement-	8	21660	May 11, 2011
[PCI DSS 1.x] 9.1 Use appropriate facility entry controls to limit and monitor physical access to systems that sto Implement Strong Access Control Measures pci-dss-requirement-	1	12634	April 25, 2011