[RETIRED] PCI DSS v.1.x Questions and Answers

Topic	Views	Activity
[PCI DSS 1.x] 12.6.1 Educate employees upon hire and at least annually (for example, by letters, posters, memos, m Maintain an Information Security Policy pci-dss-requirement-	2010	March 18, 2007
[PCI DSS 1.x] 12.6 Implement a formal security awareness program to make all employees aware of the importance of Maintain an Information Security Policy pci-dss-requirement-	3040	March 18, 2007
[PCI DSS 1.x] 12.5.5 Monitor and control all access to data Maintain an Information Security Policy pci-dss-requirement-	2327	March 18, 2007
[PCI DSS 1.x] 12.5.4 Administer user accounts, including additions, deletions, and modifications Maintain an Information Security Policy pci-dss-requirement-	2011	March 18, 2007
[PCI DSS 1.x] 12.5.3 Establish, document, and distribute security incident response and escalation procedures to e Maintain an Information Security Policy pci-dss-requirement-	2598	March 18, 2007
[PCI DSS 1.x] 12.5.2 Monitor and analyze security alerts and information, and distribute to appropriate personnel Maintain an Information Security Policy pci-dss-requirement-	1933	March 18, 2007
[PCI DSS 1.x] 12.5.1 Establish, document, and distribute security policies and procedures Maintain an Information Security Policy pci-dss-requirement-	2362	March 18, 2007
[PCI DSS 1.x] 12.5 Assign to an individual or team the following information security management responsibilities: Maintain an Information Security Policy pci-dss-requirement-	1985	March 18, 2007
[PCI DSS 1.x] 12.4 Ensure that the security policy and procedures clearly define information security responsibili Maintain an Information Security Policy pci-dss-requirement-	2416	March 18, 2007
[PCI DSS 1.x] 12.3.9 Activation of modems for vendors only when needed by vendors, with immediate deactivation aft Maintain an Information Security Policy pci-dss-requirement-	1710	March 18, 2007
[PCI DSS 1.x] 12.3.8 Automatic disconnect of modem sessions after a specific period of inactivity Maintain an Information Security Policy pci-dss-requirement-	3195	March 18, 2007
[PCI DSS 1.x] 12.3.7 List of company-approved products Maintain an Information Security Policy pci-dss-requirement-	4354	March 18, 2007
[PCI DSS 1.x] 12.3.5 Acceptable uses of the technology Maintain an Information Security Policy pci-dss-requirement-	3598	March 18, 2007
[PCI DSS 1.x] 12.3.4 Labeling of devices with owner, contact information, and purpose Maintain an Information Security Policy pci-dss-requirement-	3908	March 18, 2007
[PCI DSS 1.x] 12.3.3 A list of all such devices and personnel with access Maintain an Information Security Policy pci-dss-requirement-	3353	March 18, 2007
[PCI DSS 1.x] 12.3.2 Authentication for use of the technology Maintain an Information Security Policy pci-dss-requirement-	3001	March 18, 2007
[PCI DSS 1.x] 12.3.1 Explicit management approval Maintain an Information Security Policy pci-dss-requirement-	2863	March 18, 2007
[PCI DSS 1.x] 12.3 Develop usage policies for critical employee-facing technologies (such as modems and wireless) Maintain an Information Security Policy pci-dss-requirement-	4436	March 18, 2007
[PCI DSS 1.x] 12.1.3 Includes a review at least once a year and updates when the environment changes Maintain an Information Security Policy pci-dss-requirement-	2991	March 18, 2007
[PCI DSS 1.x] 12.1.1 Addresses all requirements in this specification Maintain an Information Security Policy pci-dss-requirement-	3515	March 18, 2007
[PCI DSS 1.x] 11.4 Use network intrusion detection systems, host-based intrusion detection systems, and intrusion Regularly Monitor and Test Networks pci-dss-requirement-	6594	March 18, 2007
[PCI DSS 1.x] 11.3.2 Application-layer penetration tests Regularly Monitor and Test Networks pci-dss-requirement-	4840	March 18, 2007
[PCI DSS 1.x] 11.3.1 Network-layer penetration tests Regularly Monitor and Test Networks pci-dss-requirement-	4463	March 18, 2007
[PCI DSS 1.x] 10.7 Retain audit trail history for at least one year, with a minimum of three months available onli Regularly Monitor and Test Networks pci-dss-requirement-	14531	March 18, 2007
[PCI DSS 1.x] 10.6 Review logs for all system components at least daily. Log reviews must include those servers th Regularly Monitor and Test Networks pci-dss-requirement-	5588	March 18, 2007
[PCI DSS 1.x] 10.5.4 Copy logs for wireless networks onto a log server on the internal LAN Regularly Monitor and Test Networks pci-dss-requirement-	2230	March 18, 2007
[PCI DSS 1.x] 10.5.3 Promptly back up audit trail files to a centralized log server or media that is difficult to Regularly Monitor and Test Networks pci-dss-requirement-	3732	March 18, 2007
[PCI DSS 1.x] 10.5.2 Protect audit trail files from unauthorized modifications Regularly Monitor and Test Networks pci-dss-requirement-	3937	March 18, 2007
[PCI DSS 1.x] 10.5.1 Limit viewing of audit trails to those with a job-related need Regularly Monitor and Test Networks pci-dss-requirement-	3181	March 18, 2007
[PCI DSS 1.x] 10.5 Secure audit trails so they cannot be altered Regularly Monitor and Test Networks pci-dss-requirement-	3154	March 18, 2007