Quarterly PCI vulnerability assessment
What this control requires
Internal and external vulnerability scans must be performed quarterly on all systems processing Bancontact or cardholder data.
Other EU Instant Payments Regulation 2024 controls
EU_INSTANT_PAYMENTS_REG_2024-CTRL-001 - Daily safeguarding reconciliationEU_INSTANT_PAYMENTS_REG_2024-CTRL-002 - Critical ICT incident reportingEU_INSTANT_PAYMENTS_REG_2024-CTRL-003 - GDPR breach notification workflowEU_INSTANT_PAYMENTS_REG_2024-CTRL-004 - AML suspicious transaction monitoringEU_INSTANT_PAYMENTS_REG_2024-CTRL-006 - Outsourcing provider oversightEU_INSTANT_PAYMENTS_REG_2024-CTRL-007 - DORA Register of Information maintenanceEU_INSTANT_PAYMENTS_REG_2024-CTRL-008 - CTIF suspicious activity escalationEU_INSTANT_PAYMENTS_REG_2024-CTRL-009 - NIS2 cyber resilience testingEU_INSTANT_PAYMENTS_REG_2024-CTRL-010 - Instant payment availability monitoringIPR-001-001 - Instant Payments Capability ImplementationIPR-005-001 - Payee Verification (VOP) ControlsIPR-008-001 - Instant Payments Pricing Compliance