PCI DSS Requirement 1.1.4 requires an organization to “Verify that firewall and router configuration standards include a description of groups, roles, and responsibilities for logical management of network components.”
You may be asking yourself where to obtain templates or PCI policy and procedure documents to help facilitate this area. And if that’s the case, you may have already found that there are literally dozens of documented PCI policies and procedures that need to be in place for ensuring compliance with the Payment Card Industry Data Security Standards (PCI DSS) provisions.
Spend some time reading through the PCI DSS version 1.2.1 standards and you will quickly come to terms with all the necessary PCI policies and procedures that are needed for compliance. Furthermore, compliance in regards to documented policy and procedure material is not just limited to Requirement 12 “Maintain an Information Security Policy”. In fact, the first 11 requirements, as you have very well seen with requirement 1.1.4, also mandate a number of policies and procedures for PCI DSS compliance.
With that said, purchasing the PCI DSS policy and procedure manual from pcipolicyportal.com is the most cost-effective means for ensuring compliance with PCI policies and procedures. The document is over 215 pages long, easy-to-edit (word format) and contains all necessary PCI policies and procedures for all 12 requirements as stated in PCI version 1.2.1.
When visiting pcipolicyportal.com, you can view a sample PCI policy along with viewing the table of contents which enables you to see exactly what is contained within this 215 + page policy and procedure manual. Its an excellent document that is used worldwide by many merchants and service providers, regardless of their size.
