Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Do the Antivirus / Wireless controls within PCI v2 apply for the entire organisation, or just for the PCI scope?

share|improve this question

No... but it depends if you're confident with the layer isolating what's in-scope and what's out-of-scope. If so, you're good.

PCI requirements only applies to what's in-scope - nothing else. The tricky part is actually to define this line. It has to be black and white and that's not easy - too many shades of grey.

To be sure, as always validate with a QSA (Qualified Security Assessor).

share|improve this answer

It would be just for the scope but for the wireless you need to prove they do not cross connect. Here I run a complete separate network and internet connection for all of our PCI stuff.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.