PCI-9.1.2:: Difference between revisions
(New page: <blockquote style="background: #C8CDC7; padding: 1em; margin-left: 0.5em;"> <br> :'''Use cameras to monitor sensitive areas. Audit this data and correlate with other entries. Store for at ...) |
No edit summary |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
<blockquote style="background: #C8CDC7; padding: 1em; margin-left: 0.5em;"> | <blockquote style="background: #C8CDC7; padding: 1em; margin-left: 0.5em;"> | ||
<br> | <br> | ||
:'''Use | :'''Use appropriate facility entry controls to limit and monitor physical access to systems that store, process, or transmit cardholder data.'''<br> | ||
<br> | |||
:* Restrict physical access to publicly accessible network jacks. | |||
<br> | <br> | ||
::'''PCI-9.1.2:''' Inquire of network administrators and also determine by observation that network jacks are only enabled when needed by authorized employees. For example, conference rooms used to host visitors should not have network ports enabled with DHCP. Alternatively, verify that visitors are escorted at all times in areas with active network jacks.'''<br> | ::'''PCI-9.1.2:''' Inquire of network administrators and also determine by observation that network jacks are only enabled when needed by authorized employees. For example, conference rooms used to host visitors should not have network ports enabled with DHCP. Alternatively, verify that visitors are escorted at all times in areas with active network jacks.'''<br> | ||
| Line 61: | Line 63: | ||
<br> | <br> | ||
--[[User:Mdpeters|Mdpeters]] | --[[User:Mdpeters|Mdpeters]] 08:44, 2 March 2007 (EST) | ||
Latest revision as of 13:44, 2 March 2007
- Use appropriate facility entry controls to limit and monitor physical access to systems that store, process, or transmit cardholder data.
- Restrict physical access to publicly accessible network jacks.
- PCI-9.1.2: Inquire of network administrators and also determine by observation that network jacks are only enabled when needed by authorized employees. For example, conference rooms used to host visitors should not have network ports enabled with DHCP. Alternatively, verify that visitors are escorted at all times in areas with active network jacks.
Testing Procedures
Insert testing guidance here.
Testing Frequency
Describe testing frequency here.
Evidence Archive Location
Insert hyperlink or location of evidence archive.
Control Stewards Process Narrative
Provide control steward commentary indicating the formal methodology in place.
Control Steward – Jon Doe
Process Illustration
Replace this test by inserting a process diagram, flowchart or other visual representation to illustrate the process narrative as necessary. Include a brief description of the process illustration.
Control Status and Auditors Commentary
The control is effective.
File:Greenlock.jpg
Status is acceptable.
Control Exception Commentary
Status is acceptable.
Remediation Plan
Remediation is not required at this time.
--Mdpeters 08:44, 2 March 2007 (EST)