IT Audit Factory · Evidence-first audit operationsFree · Professional · MSP
Products / Frameworks / 4.1.0

PCI DSS

Latest MSP source: 4.1.6. The coverage evidence on this page is the retained 4.1.0 catalog snapshot. Current release status.

Organizes reusable technical evidence for payment-card security readiness when the client scope is applicable.

This is the MSP 4.1.0 catalog snapshot, not the full publisher standard and not an assertion of Free/Professional parity. All conclusions require scope, adequate evidence and an authorized reviewer. This profile uses clause, family, criteria-group or locally authored readiness entries. It does not enumerate every official subcontrol or assessment objective.
12 catalog entries0 with exact test mappings10 family-support entries2 manual / unmapped

Control / requirementPackaged guidance & evidenceCoverage
PCI-1Network security controlsNetwork security controls
Evidence and test details

Applicable supporting collectors: NETWORK.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-2Secure system configurationsSecure system configurations
Evidence and test details

Applicable supporting collectors: GPO, NETWORK, WINDOWS.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-3Protection of stored account dataProtection of stored account data
Evidence and test details

Applicable supporting collectors: BACKUP, STORAGE.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-4Protection of data during transmissionProtection of data during transmission
Evidence and test details

Applicable supporting collectors: CERTTLS, NETWORK.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-5Protection from malicious softwareProtection from malicious software
Evidence and test details

Applicable supporting collectors: WINDOWS.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-6Secure systems and software developmentSecure systems and software development
Evidence and test details

Applicable supporting collectors: VULN.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-7Restriction of access by business needRestriction of access by business need
Evidence and test details

Applicable supporting collectors: ADSEC, ENTRA.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-8User identification and authenticationUser identification and authentication
Evidence and test details

Applicable supporting collectors: ADSEC, ENTRA.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-9Restriction of physical accessRestriction of physical access
Evidence and test details

No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.

Manual / no exact mapping
PCI-10Logging and monitoringLogging and monitoring
Evidence and test details

Applicable supporting collectors: ENTRA, NETWORK, WINDOWS.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-11Security testingSecurity testing
Evidence and test details

Applicable supporting collectors: VULN.

No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.

Family supporting scope
PCI-12Security policy and program governanceSecurity policy and program governance
Evidence and test details

No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.

Manual / no exact mapping