[PCI DSS 1.x] 11.1 Test security controls, limitations, network connections, and restrictions annually to assure t

[READ-ONLY] Archives [RETIRED] PCI DSS v.1.x Questions and Answers Regularly Monitor and Test Networks
1

11.1.a Confirm by interviewing security personnel and examining relevant code, documentation, and processes that security testing of devices is in place to assure that controls identify and stop unauthorized access attempts within the cardholder environment.
11.1.b Verify that a wireless analyzer is used at least quarterly to identify all wireless devices.

2

11.1.b – What kind of wireless analyzer is required? Where do I purchase one? How much do they cost? Are there services available to do this?

Help?

3

what wireless analyzer to use?

There are a lot of things you can use… kismet, airsnort, airwave, etc. Just go do some googling.

and yes there are many managed security services providers out there that will do this for you…