💼 12.3.4 Hardware and software technologies in use are reviewed at least once every 12 months.

• Contextual name: 💼 12.3.4 Hardware and software technologies in use are reviewed at least once every 12 months.

• ID: /frameworks/pci-dss-v4.0.1/12/03/04

• Located in: 💼 12.3 Risks to the cardholder data environment are formally identified, evaluated, and managed.

Description

Including at least the following:

• Analysis that the technologies continue to receive security fixes from vendors promptly.
• Analysis that the technologies continue to support (and do not preclude) the entity's PCI DSS compliance.
• Documentation of any industry announcements or trends related to a technology, such as when a vendor has announced “end of life” plans for a technology.
• Documentation of a plan, approved by senior management, to remediate outdated technologies, including those for which vendors have announced “end of life” plans.

Similar

• Sections
  • /frameworks/pci-dss-v4.0/12/03/04
  • /frameworks/aws-fsbp-v1.0.0/eks/02
  • /frameworks/aws-fsbp-v1.0.0/lambda/02

Similar Sections (Take Policies From)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [EKS.2] EKS clusters should run on a supported Kubernetes version
💼 AWS Foundational Security Best Practices v1.0.0 → 💼 [Lambda.2] Lambda functions should use supported runtimes
💼 PCI DSS v4.0 → 💼 12.3.4 Hardware and software technologies in use are reviewed at least once every 12 months.

Similar Sections (Give Policies To)

Section	Sub Sections	Internal Rules	Policies	Flags
💼 PCI DSS v4.0 → 💼 12.3.4 Hardware and software technologies in use are reviewed at least once every 12 months.

Sub Sections

Section	Sub Sections	Internal Rules	Policies	Flags