CloudTalk

Change-control processes and procedures are followed for all changes to system components.

Firewall and Router Configuration Standards (1.1)

Segregate Cardholder Data Environment on Internal Network Zone (1.3.6)

Documentation of All Services, Protocols, and Ports Allowed (1.1.6)

Restricting Inbound and Outbound Traffic (1.2.1)

Firewall Network Requirements (1.1.4)

Restricting Public Internet Access (1.3)

Documenting Security Policies and Firewall Management (1.5)

Current Network Diagram (1.1.2)

DE.CM-01: Networks and network services are monitored to find potentially adverse events

DE.CM-06: External service provider activities and services are monitored to find potentially adverse events

8.11 Data Masking - Data masking shall be used in accordance with the organization's topic-specific policy on access control and other related topic-specific policies, and business requirements, taking applicable legislation into consideration.

8.12 Data leakage prevention - Data leakage prevention measures shall be applied to systems, networks and any other devices that process, store, or transmit sensitive information.

8.16 Monitoring activities - Networks, systems, and applications shall be monitored for anomalous behavior and appropriate actions taken to evaluate potential information security incidents.

8.24 Use of cryptography - Rules for the effective use of cryptography, including cryptographic key management, shall be defined, and implemented.

8.3 Information access restriction - Access to information and other associated assets shall be restricted in accordance with the established topic-specific policy on access control.

8.32 Change Management - Changes to information processing facilities and information systems shall be subject to change management procedures.

55