Maintain A Vulnerability Management Program; Requirement 5: Protect All Systems Against Malware And Regularly Update Anti-Virus Software Or Programs - VeriFone Vx520 Implementation Manual

2.3. Maintain a Vulnerability Management Program

Requirement 5: Protect all systems against malware and regularly update anti-virus
software or programs
a. What the requirement says
Malicious software, commonly referred to as "malware"—including viruses, worms, and Trojans—
enters the network during many business-approved activities including employee e-mail and use of
the Internet, mobile computers, and storage devices, resulting in the exploitation of system vulnera-
bilities. Anti-virus software must be used on all systems commonly affected by malware to protect
systems from current and evolving malicious software threats. Additional anti-malware solutions
may be considered as a supplement to the anti-virus software; however, such additional solutions do
not replace the need for anti-virus software to be in place.", reference 2.
b. How your Point Vx helps you meet this requirement
The Point Vx cannot be used for e-mails or internet activities. All software downloaded to the termi-
nal is controlled by Point, protected by a digital signature (MAC) and sent over an SSL/TLS connec-
tion (if the processor supports SSL/TLS). These security measures prevent malicious software being
installed onto your Point Vx terminal.
c. What this means to you
You should install and maintain antivirus software which helps to protect your system. Make sure
that this software is up to date as security threats change.
For the Point Vx you do not need to take any action regarding antivirus software.
© 2015 VeriFone. All rights reserved. VeriFone, the VeriFone logo, Vx, Mx, VeriCentre, VeriShield, Verix V, Verix and PAYware are either
trademarks or registered trademarks of VeriFone in the United States and/or other countries. All other trademarks or brand names are the
properties of their respective holders. All features and specifications are subject to change without notice.
The information contained in this document is confidential and property of VeriFone, Inc. This material may not be copied or published, or
divulged in part or in totality without written permission form VeriFone, Inc.
Author
Jevgenijs Smirnovs
E-mail
jevgenijs.smirnovs@verifone.com
Phone
+371 67844726
Document name Verifone Payment Core
Point VxPC F02.01.xxx
Implementation Guide
Date
12-Jun-2015
Page number Version
15 1.0