ITarian Service Desk

Protecting Payment Card Devices (9.9)

Maintaining Up-to-date Device Lists (9.9.1)

Visitor Logs (9.4.4)

Media Delivery Approvals (9.6.3)

Policies and Procedures (9.10)

Policies and Procedures for Protecting Against Malware (5.4)

Monitoring Physical Access (9.1.1)

Compliance Scorecard performs and/or contracts with third parties to perform vulnerability scans & penetration tests at least annually. Issues, if any, are routed through incident and risk management processes for resolution.

Antivirus software is installed on workstations, laptops, and systems supporting such software.

PR.DS-01: The confidentiality, integrity, and availability of data-at-rest are protected

PR.DS-02: The confidentiality, integrity, and availability of data-in-transit are protected

PR.DS-10: The confidentiality, integrity, and availability of data-in-use are protected

PR.DS-11: Backups of data are created, protected, maintained, and tested

Facility Access 1 - Is there a procedure or mechanism to control the access of staff, vendors, and 3rd party personnel to critical equipment (network devices, servers, etc.) and are staff educated about the process?

Equipment Controls 1 - Is there an asset list that contains the computing devices (servers, workstations, laptops, tablets) with identifiers (serial number, MAC address, etc.)?

Facility Changes - Are physical changes to the facility documented and updated appropriately?

Allows voluntary reports of cyber threats.