حوكمة ومخاطر وامتثال الأمن السيبراني (GRC) 12 بند
PCI DSS 4.0 Network Segmentation Verification
قائمة التحقق هذه باللغة الإنجليزية.
Verifies that segmentation controls effectively isolate the cardholder data environment (CDE) to reduce PCI DSS scope.
PCI DSS 4.0
PDF أو Word مجانًا · أدخل بريدك الإلكتروني للتنزيل.
Scope & CDE Definition
- Is the cardholder data environment (CDE) boundary documented and current? *
- Is a data-flow diagram maintained showing all account data flows across systems? *
- Are connected-to and security-impacting systems identified within scope? *
Segmentation Controls
- Do network security controls isolate the CDE from out-of-scope networks? *
- Is inbound and outbound traffic to the CDE restricted to only what is necessary? *
- Are private IP addresses and routing disclosure to untrusted networks restricted? *
Firewall & Ruleset Management
- Are firewall and router rulesets reviewed at least every six months? *
- Is a default deny-all posture enforced with only explicitly authorized rules? *
- Are configuration standards for network security controls documented? *
Segmentation Testing
- Is segmentation penetration testing performed at least annually (or every 6 months for service providers)? *
- Do test results confirm segmentation is operational and isolates the CDE? *
- When was the most recent segmentation test completed?
نزّل قائمة تحقق PCI DSS 4.0 Network Segmentation Verification كاملة
احصل عليها مجانًا بصيغة PDF أنيقة قابلة للطباعة أو مستند Word قابل للتعديل.