2.3 Wireless environments are configured and managed securely
How to meet it
Change wireless defaults (keys, SNMP, passwords) and use strong encryption.
Defined requirements
The individual PCI DSS v4.0.1 requirements under 2.3, in plain English.
2.3.1For wireless tied to the CDE, all wireless vendor defaults (keys, AP passwords, SNMP defaults) are changed at installation or confirmed secure.
2.3.2Wireless encryption keys are changed when someone with key knowledge leaves or changes roles, and on suspected or known compromise.
Policy templates for this control
Use these starting documents to turn the control into evidence. Adapt each template to your scope, systems, legal obligations and actual operating process.
Cryptography and key management policyUse for ISO 27001 A.8.24, secure authentication, encryption, SOC 2 Security, and PCI DSS encryption requirements.Access control policyUse for ISO 27001 A.5.15, A.5.16, A.5.17, A.5.18, A.8.2, SOC 2 Security, and PCI DSS requirements 7 and 8.Change management policyUse for ISO 27001 A.8.32, A.8.9, SOC 2 change management criteria, and PCI DSS requirement 6 change controls.Password and authentication policyUse for ISO 27001 A.5.17, A.8.5, SOC 2 Security, and PCI DSS requirement 8 authentication controls.
Open the control-to-policy mapBack to Requirement 2, or see PCI DSS templates. To run PCI controls with automation, read how AI manages controls.