💼 11.4.2 Internal penetration testing is performed.
-
Contextual name: 💼 11.4.2 Internal penetration testing is performed.
-
ID:
/frameworks/pci-dss-v4.0.1/11/04/02
Description
Including:
- Per the entity's defined methodology,
- At least once every 12 months
- After any significant infrastructure or application upgrade or change
- By a qualified internal resource or qualified external third-party
- Organizational independence of the tester exists (not required to be a QSA or ASV).
Similar
- Sections
/frameworks/pci-dss-v4.0/11/04/02
Similar Sections (Take Policies From)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 PCI DSS v4.0 → 💼 11.4.2 Internal penetration testing is performed. |
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 PCI DSS v4.0 → 💼 11.4.2 Internal penetration testing is performed. |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|