Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Do the Antivirus / Wireless controls within PCI v2 apply for the entire organisation, or just for the PCI scope?

share|improve this question

2 Answers 2

No... but it depends if you're confident with the layer isolating what's in-scope and what's out-of-scope. If so, you're good.

PCI requirements only applies to what's in-scope - nothing else. The tricky part is actually to define this line. It has to be black and white and that's not easy - too many shades of grey.

To be sure, as always validate with a QSA (Qualified Security Assessor).

share|improve this answer

It would be just for the scope but for the wireless you need to prove they do not cross connect. Here I run a complete separate network and internet connection for all of our PCI stuff.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.