💼 11.5.1 Intrusion-detection and/or intrusion-prevention techniques are used to detect and/or prevent intrusions into the network.
-
Contextual name: 💼 11.5.1 Intrusion-detection and/or intrusion-prevention techniques are used to detect and/or prevent intrusions into the network.
-
ID:
/frameworks/pci-dss-v4.0.1/11/05/01 -
Located in: 💼 11.5 Network intrusions and unexpected file changes are detected and responded to.
Description
As follows:
- All traffic is monitored at the perimeter of the CDE.
- All traffic is monitored at critical points in the CDE.
- Personnel are alerted to suspected compromises.
- All intrusion-detection and prevention engines, baselines, and signatures are kept up to date.
Similar
- Sections
/frameworks/pci-dss-v4.0/11/05/01/frameworks/aws-fsbp-v1.0.0/guardduty/06/frameworks/aws-fsbp-v1.0.0/guardduty/07/frameworks/aws-fsbp-v1.0.0/guardduty/09/frameworks/aws-fsbp-v1.0.0/guardduty/10
Similar Sections (Take Policies From)
Similar Sections (Give Policies To)
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 PCI DSS v4.0 → 💼 11.5.1 Intrusion-detection and/or intrusion-prevention techniques are used to detect and/or prevent intrusions into the network. | 1 | 1 |
Sub Sections
| Section | Sub Sections | Internal Rules | Policies | Flags |
|---|---|---|---|---|
| 💼 11.5.1.1 Intrusion-detection and/or intrusion-prevention techniques detect, alert on/prevent, and address covert malware communication channels. | 1 |
Policies (1)
| Policy | Logic Count | Flags |
|---|---|---|
| 📝 AWS VPC Flow Logs are not enabled 🟢 | 1 | 🟠 x1, 🟢 x5 |