PCI DSS 12.11a requirements quarterly review

The regulation requires a systematic assessment of this process, which calls for a competent and independent internal auditor or our specialists with many years of experience in the financial sector who will evaluate the process.

We will examine : 

• Log review policies, procedures and records; 
• Firewall rule-set implementation and review policies, procedures and records; 
• Configuration standards definitions and procedures how them are applied to systems; 
• Security alerts management policies, records and response procedures; 
• Change management policies, procedures and records.

Report will contain: 

• Documented description of all reviews performed, scope, personnel interviewed, customer systems checked.

• Recommendation and implementation plan. Review of previous recommendations, if any.