サイバーセキュリティGRC 12項目
PCI DSS 4.0 Network Segmentation Verification
このチェックリストは英語版です。
Verifies that segmentation controls effectively isolate the cardholder data environment (CDE) to reduce PCI DSS scope.
PCI DSS 4.0
無料のPDFまたはWord・メールアドレスを入力してダウンロード。
Scope & CDE Definition
- Is the cardholder data environment (CDE) boundary documented and current? *
- Is a data-flow diagram maintained showing all account data flows across systems? *
- Are connected-to and security-impacting systems identified within scope? *
Segmentation Controls
- Do network security controls isolate the CDE from out-of-scope networks? *
- Is inbound and outbound traffic to the CDE restricted to only what is necessary? *
- Are private IP addresses and routing disclosure to untrusted networks restricted? *
Firewall & Ruleset Management
- Are firewall and router rulesets reviewed at least every six months? *
- Is a default deny-all posture enforced with only explicitly authorized rules? *
- Are configuration standards for network security controls documented? *
Segmentation Testing
- Is segmentation penetration testing performed at least annually (or every 6 months for service providers)? *
- Do test results confirm segmentation is operational and isolates the CDE? *
- When was the most recent segmentation test completed?
PCI DSS 4.0 Network Segmentation Verificationチェックリストの完全版をダウンロード
印刷しやすいPDF、または編集可能なWord文書で無料で入手できます。