Entity ensures that the application transmitting cardholder data over open/public networks are secured by TLS
profile_icon
| Sep 08, 2023
Entity’s Senior Management or the Information Security Officer periodically reviews and ensures that administrative access to the critical systems is restricted to only those individuals who require such access to perform their job functions
profile_icon
| Sep 08, 2023
Entity ensures that critical systems are configured to limit concurrent login sessions and the inactive user interface is not displayed when the session is terminated.
profile_icon
| Sep 08, 2023
Entity monitors and flags tampering to the audit logging and monitoring tools in the production environment.
profile_icon
| Sep 08, 2023
Entity ensure that anti-virus solutions deployed employee workstations cannot be altered or tampered
profile_icon
| Sep 08, 2023
Entity ensures that installation of software or programs in the production environment is periodically reviewed for it’s license violation and other security vulnerabilities
profile_icon
| Sep 08, 2023