💼 11.3.1 Internal vulnerability scans are performed.
-
Contextual name: 💼 11.3.1 Internal vulnerability scans are performed.
-
ID:
/frameworks/pci-dss-v4.0.1/11/03/01 -
Located in: 💼 11.3 External and internal vulnerabilities are regularly identified, prioritized, and addressed.
Description
As follows:
- At least once every three months.
- Vulnerabilities that are either high-risk or critical (according to the entity's vulnerability risk rankings defined at Requirement 6.3.1) are resolved.
- Rescans are performed that confirm all high-risk and critical vulnerabilities (as noted above) have been resolved.
- Scan tool is kept up to date with latest vulnerability information.
- Scans are performed by qualified personnel and organizational independence of the tester exists.
Similar
- Sections
/frameworks/pci-dss-v4.0/11/03/01/frameworks/aws-fsbp-v1.0.0/inspector/01/frameworks/aws-fsbp-v1.0.0/inspector/02
Similar Sections (Take Policies From)
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 PCI DSS v4.0 → 💼 11.3.1 Internal vulnerability scans are performed. | 3 |