Requirement 11: Regularly Test Security Systems And Processes - VeriFone Vx520 Implementation Manual

needs to be changed please contact the representative of your service provider. Chapter "5 Audit
Trail log" also gives you guidance on how to change the address of the centralized log server.

Requirement 11: Regularly test security systems and processes

a. What the requirement says
"Vulnerabilities are being discovered continually by malicious individuals and researchers, and being
introduced by new software. System components, processes, and custom software should be tested
frequently to ensure security controls continue to reflect a changing environment.", reference 2.
b. How your Point Vx helps you meet this requirement
Your Point Vx has mechanisms to ensure that software and parameters can be downloaded from
trusted sources only. These mechanisms are based on cryptographic signatures and MAC protection
(Message Authentication Code).
c. What this means to you
You should test your network connections (including wireless networks) periodically for vulnerabili-
ties, and make use of network vulnerability scans. If you make any significant changes to your net-
work, you should also test for vulnerabilities.
© 2015 VeriFone. All rights reserved. VeriFone, the VeriFone logo, Vx, Mx, VeriCentre, VeriShield, Verix V, Verix and PAYware are either
trademarks or registered trademarks of VeriFone in the United States and/or other countries. All other trademarks or brand names are the
properties of their respective holders. All features and specifications are subject to change without notice.
The information contained in this document is confidential and property of VeriFone, Inc. This material may not be copied or published, or
divulged in part or in totality without written permission form VeriFone, Inc.
Author
Jevgenijs Smirnovs
E-mail
jevgenijs.smirnovs@verifone.com
Phone
+371 67844726
Document name Verifone Payment Core
Point VxPC F02.01.xxx
Implementation Guide
Date
12-Jun-2015
Page number Version
20 1.0