[RETIRED] PCI DSS v.1.x Questions and Answers

Topic	Replies	Views	Activity
[PCI DSS 1.x] 12.3.10 When accessing cardholder data remotely via modem, prohibition of storage of cardholder data Maintain an Information Security Policy pci-dss-requirement-	1	3929	September 30, 2009
[PCI DSS 1.x] 6.3 Develop software applications in accordance with PCI DSS (for example, secure authenti Maintain a Vulnerability Management Program pci-dss-requirement-	1	3415	September 7, 2009
[PCI DSS 1.x] 3.2.2 Do not store the card-verification code or value (three-digit or four-digit number p Protect Cardholder Data pci-dss-requirement-	1	5046	August 3, 2009
[PCI DSS 1.x] 1.3.4 Do not allow internal addresses to pass from the Internet into the DMZ. Build and Maintain a Secure Network pci-dss-requirement-	3	8514	June 22, 2009
[PCI DSS 1.x] 6.5.7 Improper error handling Maintain a Vulnerability Management Program pci-dss-requirement-	2	3900	June 14, 2009
[PCI DSS 1.x] 3.6.4 Periodic cryptographic key changes Protect Cardholder Data pci-dss-requirement-	1	7453	April 22, 2009
[PCI DSS 1.x] 11.1 Test security controls, limitations, network connections, and restrictions annually to assure t Regularly Monitor and Test Networks pci-dss-requirement-	2	5039	March 16, 2009
[PCI DSS 1.x] 10.2.1 All individual accesses to cardholder data Regularly Monitor and Test Networks pci-dss-requirement-	2	5352	August 8, 2008
[PCI DSS 1.x] 1.3.8 Implement IP masquerading to prevent internal addresses from being translated and re Build and Maintain a Secure Network pci-dss-requirement-	1	4421	June 3, 2008
[PCI DSS 1.x] 8.5.8 Do not use group, shared, or generic accounts and passwords Implement Strong Access Control Measures pci-dss-requirement-	1	6487	February 12, 2008
[PCI DSS 1.x] A.1.4 Enable processes to provide for timely forensic investigation in the event of a compromise to Appendix A: PCI DSS Applicability for Hosting Prov requirement-a1:-host	0	11240	March 18, 2007
[PCI DSS 1.x] A.1.3 Ensure logging and audit trails are enabled and unique to each entity's cardholder data enviro Appendix A: PCI DSS Applicability for Hosting Prov requirement-a1:-host	0	2546	March 18, 2007
[PCI DSS 1.x] A.1.2 Restrict each entity's access and privileges to own cardholder data environment only Appendix A: PCI DSS Applicability for Hosting Prov requirement-a1:-host	0	2583	March 18, 2007
[PCI DSS 1.x] A.1.1 Ensure that each entity only has access to own cardholder data environment Appendix A: PCI DSS Applicability for Hosting Prov requirement-a1:-host	0	2404	March 18, 2007
[PCI DSS 1.x] A.1 Protect each entity's (that is merchant, service provider, or other entity) hosted environment a Appendix A: PCI DSS Applicability for Hosting Prov requirement-a1:-host	0	3406	March 18, 2007
[PCI DSS 1.x] 12.10.4 Connect and disconnect entities by following an established process Maintain an Information Security Policy pci-dss-requirement-	0	3056	March 18, 2007
[PCI DSS 1.x] 12.10.2 Ensure proper due diligence is conducted prior to connecting an entity Maintain an Information Security Policy pci-dss-requirement-	0	2871	March 18, 2007
[PCI DSS 1.x] 12.10.1 Maintain list of connected entities Maintain an Information Security Policy pci-dss-requirement-	0	3268	March 18, 2007
[PCI DSS 1.x] 12.10 All processors and service providers must maintain and implement policies and procedures to ma Maintain an Information Security Policy pci-dss-requirement-	0	2953	March 18, 2007
[PCI DSS 1.x] 12.9.6 Develop process to modify and evolve the incident response plan according to lessons learned Maintain an Information Security Policy pci-dss-requirement-	0	2170	March 18, 2007
[PCI DSS 1.x] 12.9.5 Include alerts from intrusion detection, intrusion prevention, and file integrity monitoring Maintain an Information Security Policy pci-dss-requirement-	0	3311	March 18, 2007
[PCI DSS 1.x] 12.9.4 Provide appropriate training to staff with security breach response responsibilities Maintain an Information Security Policy pci-dss-requirement-	0	2549	March 18, 2007
[PCI DSS 1.x] 12.9.3 Designate specific personnel to be available on a 24/7 basis to respond to alerts Maintain an Information Security Policy pci-dss-requirement-	0	1656	March 18, 2007
[PCI DSS 1.x] 12.9.2 Test the plan at least annually Maintain an Information Security Policy pci-dss-requirement-	0	1704	March 18, 2007
[PCI DSS 1.x] 12.9.1 Create the incident response plan to be implemented in the event of system compromise. Ensure Maintain an Information Security Policy pci-dss-requirement-	0	4746	March 18, 2007
[PCI DSS 1.x] 12.9 Implement an incident response plan. Be prepared to respond immediately to a system breach. Maintain an Information Security Policy pci-dss-requirement-	0	2337	March 18, 2007
[PCI DSS 1.x] 12.8.1 Service providers must adhere to the PCI DSS requirements Maintain an Information Security Policy pci-dss-requirement-	0	3225	March 18, 2007
[PCI DSS 1.x] 12.8 If cardholder data is shared with service providers, then contractually the following is requir Maintain an Information Security Policy pci-dss-requirement-	0	2252	March 18, 2007
[PCI DSS 1.x] 12.7 Screen potential employees to minimize the risk of attacks from internal sources. For those em Maintain an Information Security Policy pci-dss-requirement-	0	2541	March 18, 2007
[PCI DSS 1.x] 12.6.2 Require employees to acknowledge in writing that they have read and understood the company's Maintain an Information Security Policy pci-dss-requirement-	0	3580	March 18, 2007