Wireless PCI Compliance Solutions
Payment Card Industry - Data Security Standard (PCI-DSS) requirements apply to all member, merchants and service providers that store, process or transmit credit card data. In the PCI-DSS, currently seven requirements relate specifically to wireless vulnerability whether or not wireless infrastructure exists. As wireless devices proliferate, additional requirements will be added to address wireless vulnerabilities.
PCI requirements that apply when wireless is officially deployed
- (Section 2.1) Change vendor-supplied defaults for wireless devices
- (Section 4.1) Use appropriate encryption methodologies for wireless networks
- (Section 10.5.4) Copy logs for wireless networks onto a centralized internal log server or media
PCI requirements that apply when wireless is not officially deployed
- (Section 11.1b) Use a wireless analyzer at least quarterly to identify all wireless devices
- (Section 11.2) Run internal and external network vulnerability scans at least quarterly
- (Section 11.4) Use a network intrusion detection and prevention system to monitor network traffic
- (Section 2.9) Provide 24/7 incident response against security breaches
AirTight® Networks provides solutions for wireless vulnerability assessment and PCI compliance
- Perform periodic wireless vulnerability assessments
- Use periodic reports to prove compliance with wireless PCI requirements
- Protect sensitive customer data from wireless attacks
AirTight Networks' free wireless vulnerability assessment will identify current and/or potential wireless intrusion threats in your network and map to specific regulatory requirements. Your free wireless vulnerability assessment will provide:
- Status of your access points - Open, uncategorized, authorized and rogue APs
- Types of clients - Authorized, unauthorized, uncategorized and ad-hoc clients
- Security events - Security-related events that affect your wireless network
- PCI compliance posture
