Analyze/catalog/frameworks/pci-dss.json
|
{
"key": "PCI DSS", "order": 10, "name": "Payment Card Industry Data Security Standard", "shortName": "PCI DSS v4.0.1", "version": "v4.0.1", "publisher": "PCI Security Standards Council", "type": "standard", "url": "https://www.pcisecuritystandards.org/standards/pci-dss/", "retrieved": "2026-09-24", "mapping": "jsolve", "note": "Mapping by JSolve B.V.: which tests evidence a control is JSolve's assessment, not the publisher's. A control with tests is fully assessed only when they check everything about it that Azure configuration can show. Controls that do not concern the Azure environment (people, physical security, organization-wide governance, end-user devices, software development) are not applicable; the other controls without a test need evidence outside configuration. Requirements 1 to 12 (the numbering of Microsoft's PCI DSS v4 regulatory compliance initiative, which lists every requirement); appendices A1 to A3 are not included. Requirements are listed by number with the name of their principal requirement; the requirement text is not reproduced.", "controls": { "1.1.1": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"notApplicable"}, "1.1.2": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"notApplicable"}, "1.2.1": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"manual"}, "1.2.2": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"manual"}, "1.2.3": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"manual"}, "1.2.4": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"manual"}, "1.2.5": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"manual"}, "1.2.6": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"manual"}, "1.2.7": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"manual"}, "1.2.8": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"manual"}, "1.3.1": {"title":"Requirement 1: Install and Maintain Network Security Controls","coverage":"partial","tests":["AZ-ACI-001","AZ-ACR-003","AZ-ADX-001","AZ-AI-002","AZ-AI-005","AZ-AI-007","AZ-AKS-003","AZ-AKS-007","AZ-APP-008","AZ-AVD-001","AZ-BOT-001","AZ-CAPP-002","AZ-COS-002","AZ-DB-001","AZ-DB-002","AZ-DBX-001","AZ-DBX-002","AZ-DBX-003","AZ-DBX-004","AZ-DBX-006","AZ-KV-003","AZ-KV-004","AZ-NET-001","AZ-NET-002","AZ-NET-003","AZ-NET-004","AZ-NET-005","AZ-NET-006","AZ-NET-008","AZ-NET-009","AZ-PAAS-001","AZ-SQL-005","AZ-STG-006","AZ-STG-007","AZ-STG-008","AZ-STG-009","AZ-VM-011","AZ-VM-012"]}, "1.3.2": {"title":"Requirement 1: Install and Maintain Network Security Controls","coverage":"partial","tests":["AZ-AI-003","AZ-AI-006","AZ-AKS-007","AZ-DBX-001","AZ-DBX-006","AZ-NET-006","AZ-NET-007","AZ-NET-009","AZ-SYN-001"]}, "1.3.3": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"notApplicable"}, "1.4.1": {"title":"Requirement 1: Install and Maintain Network Security Controls","coverage":"partial","tests":["AZ-ACR-003","AZ-ADX-001","AZ-AI-002","AZ-AI-005","AZ-AKS-003","AZ-APP-008","AZ-AVD-001","AZ-BOT-001","AZ-CAPP-002","AZ-COS-002","AZ-DB-001","AZ-DB-002","AZ-DBX-003","AZ-DBX-004","AZ-KV-003","AZ-KV-004","AZ-PAAS-001","AZ-SQL-005","AZ-STG-006","AZ-STG-007","AZ-STG-008","AZ-STG-009","AZ-VM-011","AZ-VM-012"]}, "1.4.2": {"title":"Requirement 1: Install and Maintain Network Security Controls","coverage":"partial","tests":["AZ-ACI-001","AZ-AI-007","AZ-DBX-002","AZ-NET-001","AZ-NET-002","AZ-NET-003","AZ-NET-004","AZ-NET-005","AZ-NET-008","AZ-NET-011","AZ-NET-023"]}, "1.4.3": {"title":"Requirement 1: Install and Maintain Network Security Controls","coverage":"partial","tests":["AZ-NET-009"]}, "1.4.4": {"title":"Requirement 1: Install and Maintain Network Security Controls","coverage":"partial","tests":["AZ-ADX-001","AZ-COS-002","AZ-DB-001","AZ-DB-002","AZ-PAAS-001","AZ-SQL-005","AZ-STG-006","AZ-STG-007","AZ-STG-008","AZ-VM-011","AZ-VM-012"]}, "1.4.5": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"manual"}, "1.5.1": {"title":"Requirement 1: Install and Maintain Network Security Controls","applicability":"notApplicable"}, "2.1.1": {"title":"Requirement 2: Apply Secure Configurations to All System Components","applicability":"notApplicable"}, "2.1.2": {"title":"Requirement 2: Apply Secure Configurations to All System Components","applicability":"notApplicable"}, "2.2.1": {"title":"Requirement 2: Apply Secure Configurations to All System Components","coverage":"partial","tests":["AZ-AKS-004","AZ-DFA-004","AZ-GOV-001","AZ-GOV-002","AZ-GOV-009","AZ-VM-007"]}, "2.2.2": {"title":"Requirement 2: Apply Secure Configurations to All System Components","coverage":"partial","tests":["AZ-ACR-001","AZ-AKS-001","AZ-APP-004"]}, "2.2.3": {"title":"Requirement 2: Apply Secure Configurations to All System Components","applicability":"manual"}, "2.2.4": {"title":"Requirement 2: Apply Secure Configurations to All System Components","coverage":"partial","tests":["AZ-APIM-001","AZ-APP-005"]}, "2.2.5": {"title":"Requirement 2: Apply Secure Configurations to All System Components","coverage":"partial","tests":["AZ-APP-003"]}, "2.2.6": {"title":"Requirement 2: Apply Secure Configurations to All System Components","coverage":"partial","tests":["AZ-APIM-001","AZ-APP-005","AZ-APP-007","AZ-NET-014"]}, "2.2.7": {"title":"Requirement 2: Apply Secure Configurations to All System Components","coverage":"partial","tests":["AZ-APP-003","AZ-NET-011"]}, "2.3.1": {"title":"Requirement 2: Apply Secure Configurations to All System Components","applicability":"notApplicable"}, "2.3.2": {"title":"Requirement 2: Apply Secure Configurations to All System Components","applicability":"notApplicable"}, "3.1.1": {"title":"Requirement 3: Protect Stored Account Data","applicability":"notApplicable"}, "3.1.2": {"title":"Requirement 3: Protect Stored Account Data","applicability":"notApplicable"}, "3.2.1": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.3.1": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.3.1.1": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.3.1.2": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.3.1.3": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.3.2": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.3.3": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.4.1": {"title":"Requirement 3: Protect Stored Account Data","coverage":"partial","tests":["AZ-SQL-010"]}, "3.4.2": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.5.1": {"title":"Requirement 3: Protect Stored Account Data","coverage":"partial","tests":["AZ-ADX-002","AZ-ADX-003","AZ-AKS-009","AZ-AUTO-001","AZ-SQL-007","AZ-SQL-008","AZ-STG-020","AZ-STG-021","AZ-VM-001","AZ-VM-002"]}, "3.5.1.1": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.5.1.2": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.5.1.3": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.6.1": {"title":"Requirement 3: Protect Stored Account Data","coverage":"partial","tests":["AZ-AKS-009","AZ-KV-001","AZ-SQL-008","AZ-STG-021"]}, "3.6.1.1": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.6.1.2": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.6.1.3": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.6.1.4": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.7.1": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.7.2": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.7.3": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.7.4": {"title":"Requirement 3: Protect Stored Account Data","coverage":"partial","tests":["AZ-KV-005","AZ-KV-007","AZ-KV-010"]}, "3.7.5": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.7.6": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.7.7": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.7.8": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "3.7.9": {"title":"Requirement 3: Protect Stored Account Data","applicability":"manual"}, "4.1.1": {"title":"Requirement 4: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks","applicability":"notApplicable"}, "4.1.2": {"title":"Requirement 4: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks","applicability":"notApplicable"}, "4.2.1": {"title":"Requirement 4: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks","coverage":"partial","tests":["AZ-APIM-002","AZ-APIM-005","AZ-APIM-006","AZ-APP-001","AZ-APP-002","AZ-APP-003","AZ-BOT-003","AZ-CAPP-001","AZ-KV-008","AZ-MY-001","AZ-NET-013","AZ-PAAS-003","AZ-PG-001","AZ-RED-001","AZ-SQL-006","AZ-STG-001","AZ-STG-002","AZ-STG-018","AZ-STG-019"]}, "4.2.1.1": {"title":"Requirement 4: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks","applicability":"manual"}, "4.2.1.2": {"title":"Requirement 4: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks","applicability":"notApplicable"}, "4.2.2": {"title":"Requirement 4: Protect Cardholder Data with Strong Cryptography During Transmission Over Open, Public Networks","applicability":"notApplicable"}, "5.1.1": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","applicability":"notApplicable"}, "5.1.2": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","applicability":"notApplicable"}, "5.2.1": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","coverage":"partial","tests":["AZ-DEF-014","AZ-DFA-001","AZ-VM-006"]}, "5.2.2": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","coverage":"partial","tests":["AZ-DEF-014","AZ-DEF-025","AZ-DFA-001","AZ-VM-006"]}, "5.2.3": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","applicability":"manual"}, "5.2.3.1": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","applicability":"manual"}, "5.3.1": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","coverage":"partial","tests":["AZ-DFA-001"]}, "5.3.2": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","coverage":"partial","tests":["AZ-VM-006"]}, "5.3.2.1": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","applicability":"manual"}, "5.3.3": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","applicability":"notApplicable"}, "5.3.4": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","applicability":"manual"}, "5.3.5": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","applicability":"manual"}, "5.4.1": {"title":"Requirement 5: Protect All Systems and Networks from Malicious Software","applicability":"notApplicable"}, "6.1.1": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"notApplicable"}, "6.1.2": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"notApplicable"}, "6.2.1": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"notApplicable"}, "6.2.2": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"notApplicable"}, "6.2.3": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"notApplicable"}, "6.2.3.1": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"notApplicable"}, "6.2.4": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"notApplicable"}, "6.3.1": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","coverage":"partial","tests":["AZ-DEF-001","AZ-DEF-003","AZ-DEF-008","AZ-DEF-009","AZ-DEF-015","AZ-DEF-017","AZ-DFA-003","AZ-GOV-010","AZ-SQL-009","AZ-VM-005"]}, "6.3.2": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"manual"}, "6.3.3": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","coverage":"partial","tests":["AZ-AKS-006","AZ-DFA-002","AZ-DFA-003","AZ-GOV-010"]}, "6.4.1": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","coverage":"partial","tests":["AZ-NET-012","AZ-NET-015","AZ-NET-016","AZ-NET-017","AZ-NET-018"]}, "6.4.2": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","coverage":"partial","tests":["AZ-NET-012","AZ-NET-015","AZ-NET-016","AZ-NET-017","AZ-NET-018"]}, "6.4.3": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"notApplicable"}, "6.5.1": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","coverage":"partial","tests":["AZ-ADF-002"]}, "6.5.2": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"manual"}, "6.5.3": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"manual"}, "6.5.4": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"manual"}, "6.5.5": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"manual"}, "6.5.6": {"title":"Requirement 6: Develop and Maintain Secure Systems and Software","applicability":"manual"}, "7.1.1": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","applicability":"notApplicable"}, "7.1.2": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","applicability":"notApplicable"}, "7.2.1": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","coverage":"partial","tests":["AZ-AKS-002","AZ-APIM-004","AZ-COS-003","AZ-GOV-005","AZ-IAM-008","AZ-IAM-010","AZ-IAM-023","AZ-KV-002","AZ-KV-009","AZ-MSG-001"]}, "7.2.2": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","coverage":"partial","tests":["AZ-AKS-002","AZ-AKS-005","AZ-APIM-004","AZ-COS-003","AZ-GOV-005","AZ-IAM-001","AZ-IAM-002","AZ-IAM-004","AZ-IAM-005","AZ-IAM-008","AZ-IAM-009","AZ-IAM-010","AZ-IAM-011","AZ-IAM-012","AZ-IAM-017","AZ-IAM-018","AZ-IAM-023","AZ-KV-002","AZ-KV-009","AZ-MSG-001"]}, "7.2.3": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","applicability":"manual"}, "7.2.4": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","applicability":"manual"}, "7.2.5": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","coverage":"partial","tests":["AZ-IAM-003","AZ-IAM-015","AZ-IAM-016","AZ-IAM-019"]}, "7.2.5.1": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","applicability":"manual"}, "7.2.6": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","applicability":"manual"}, "7.3.1": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","coverage":"partial","tests":["AZ-ACR-002","AZ-APP-009","AZ-STG-003","AZ-STG-004"]}, "7.3.2": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","applicability":"manual"}, "7.3.3": {"title":"Requirement 7: Restrict Access to System Components and Cardholder Data by Business Need to Know","applicability":"manual"}, "8.1.1": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"notApplicable"}, "8.1.2": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"notApplicable"}, "8.2.1": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-ACR-001","AZ-ACR-004","AZ-ACR-005","AZ-AI-001","AZ-AI-007","AZ-AKS-001","AZ-AKS-002","AZ-APP-004","AZ-BOT-002","AZ-COS-001","AZ-MSG-001","AZ-MY-003","AZ-PAAS-002","AZ-PG-004","AZ-RED-002","AZ-SQL-003","AZ-SQL-004","AZ-STG-005","AZ-STG-011","AZ-STG-023"]}, "8.2.2": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-ACR-001","AZ-ACR-004","AZ-ACR-005","AZ-AI-001","AZ-AI-007","AZ-AKS-001","AZ-AKS-002","AZ-APP-004","AZ-BOT-002","AZ-COS-001","AZ-MSG-001","AZ-MY-003","AZ-PAAS-002","AZ-PG-004","AZ-RED-002","AZ-SQL-003","AZ-SQL-004","AZ-STG-005","AZ-STG-011","AZ-STG-023"]}, "8.2.3": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.2.4": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.2.5": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-IAM-006","AZ-IAM-007"]}, "8.2.6": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-IAM-020"]}, "8.2.7": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-IAM-021"]}, "8.2.8": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.3.1": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-ACR-002","AZ-APP-009","AZ-STG-003","AZ-STG-004"]}, "8.3.2": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-ADF-001","AZ-APIM-003","AZ-AUTO-001","AZ-SEC-001","AZ-SEC-002","AZ-SEC-003","AZ-SEC-004"]}, "8.3.3": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.3.4": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.3.5": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.3.6": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.3.7": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.3.8": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.3.9": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.3.10": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"notApplicable"}, "8.3.10.1": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"notApplicable"}, "8.3.11": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"notApplicable"}, "8.4.1": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-IAM-011","AZ-IAM-024","AZ-IAM-026","AZ-IAM-027"]}, "8.4.2": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-IAM-026","AZ-IAM-027"]}, "8.4.3": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-IAM-027","AZ-NET-021"]}, "8.5.1": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.6.1": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","applicability":"manual"}, "8.6.2": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-ADF-001","AZ-APIM-003","AZ-AUTO-001","AZ-SEC-001","AZ-SEC-002","AZ-SEC-003","AZ-SEC-004"]}, "8.6.3": {"title":"Requirement 8: Identify Users and Authenticate Access to System Components","coverage":"partial","tests":["AZ-AKS-008","AZ-APP-006","AZ-AUTO-002","AZ-IAM-013","AZ-IAM-014","AZ-IAM-022","AZ-KV-006","AZ-KV-011","AZ-STG-012","AZ-STG-013","AZ-STG-024"]}, "9.1.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.1.2": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.2.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.2.1.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.2.2": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.2.3": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.2.4": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.3.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.3.1.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.3.2": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.3.3": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.3.4": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.4.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.4.1.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.4.2": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.4.3": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.4.4": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.4.5": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.4.5.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.4.6": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.4.7": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.5.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.5.1.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.5.1.2": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.5.1.2.1": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "9.5.1.3": {"title":"Requirement 9: Restrict Physical Access to Cardholder Data","applicability":"notApplicable"}, "10.1.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"notApplicable"}, "10.1.2": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"notApplicable"}, "10.2.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-DBX-005","AZ-LOG-001","AZ-LOG-002","AZ-LOG-014","AZ-LOG-015","AZ-LOG-017","AZ-LOG-018","AZ-LOG-020","AZ-LOG-021","AZ-LOG-023","AZ-MY-002","AZ-NET-024","AZ-NET-025","AZ-PG-002","AZ-PG-003","AZ-SQL-001","AZ-VM-008"]}, "10.2.1.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-LOG-014","AZ-MY-002","AZ-PG-002","AZ-PG-003","AZ-SQL-001"]}, "10.2.1.2": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-LOG-001","AZ-LOG-002"]}, "10.2.1.3": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.2.1.4": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-PG-002"]}, "10.2.1.5": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.2.1.6": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.2.1.7": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.2.2": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.3.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.3.2": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-LOG-026"]}, "10.3.3": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-LOG-001","AZ-LOG-002"]}, "10.3.4": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.4.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.4.1.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-DEF-002","AZ-DEF-003","AZ-DEF-004","AZ-DEF-005","AZ-DEF-006","AZ-DEF-007","AZ-DEF-008","AZ-DEF-009","AZ-DEF-010","AZ-DEF-011","AZ-DEF-012","AZ-DEF-013","AZ-DEF-023","AZ-LOG-003","AZ-LOG-004","AZ-LOG-005","AZ-LOG-006","AZ-LOG-007","AZ-LOG-008","AZ-LOG-009","AZ-LOG-010","AZ-LOG-011","AZ-LOG-012"]}, "10.4.2": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.4.2.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.4.3": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-DEF-022"]}, "10.5.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-LOG-016","AZ-LOG-019","AZ-LOG-022","AZ-LOG-024","AZ-SQL-002"]}, "10.6.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.6.2": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.6.3": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.7.1": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "10.7.2": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","coverage":"partial","tests":["AZ-LOG-025"]}, "10.7.3": {"title":"Requirement 10: Log and Monitor All Access to System Components and Cardholder Data","applicability":"manual"}, "11.1.1": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"notApplicable"}, "11.1.2": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"notApplicable"}, "11.2.1": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"notApplicable"}, "11.2.2": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"notApplicable"}, "11.3.1": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","coverage":"partial","tests":["AZ-DEF-003","AZ-DEF-008","AZ-DEF-009","AZ-DEF-015","AZ-DEF-017","AZ-SQL-009","AZ-VM-005"]}, "11.3.1.1": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.3.1.2": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.3.1.3": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.3.2": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.3.2.1": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.4.1": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.4.2": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.4.3": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.4.4": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.4.5": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.4.6": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.4.7": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.5.1": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","coverage":"partial","tests":["AZ-DEF-002","AZ-NET-019","AZ-NET-020"]}, "11.5.1.1": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"manual"}, "11.5.2": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","coverage":"partial","tests":["AZ-DEF-016","AZ-VM-013"]}, "11.6.1": {"title":"Requirement 11: Test Security of Systems and Networks Regularly","applicability":"notApplicable"}, "12.1.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.1.2": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.1.3": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.1.4": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.2.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.3.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.3.2": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.3.3": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"manual"}, "12.3.4": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","coverage":"partial","tests":["AZ-APIM-007","AZ-GOV-008","AZ-VM-009"]}, "12.4.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.4.2": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.4.2.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.5.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","coverage":"partial","tests":["AZ-VM-013"]}, "12.5.2": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","coverage":"partial","tests":["AZ-DEF-024"]}, "12.5.2.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.5.3": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.6.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.6.2": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.6.3": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.6.3.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.6.3.2": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.7.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.8.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","coverage":"partial","tests":["AZ-IAM-025"]}, "12.8.2": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.8.3": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.8.4": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.8.5": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.9.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.9.2": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.10.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.10.2": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.10.3": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.10.4": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.10.4.1": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.10.5": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","coverage":"partial","tests":["AZ-DEF-018","AZ-DEF-019","AZ-DEF-020","AZ-DEF-021","AZ-DEF-022"]}, "12.10.6": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"}, "12.10.7": {"title":"Requirement 12: Support Information Security with Organizational Policies and Programs","applicability":"notApplicable"} } } |