{"id":1250,"date":"2021-03-26T07:51:26","date_gmt":"2021-03-26T07:51:26","guid":{"rendered":"https:\/\/www.pcidssguide.com\/?p=1250"},"modified":"2023-10-09T16:25:21","modified_gmt":"2023-10-09T16:25:21","slug":"how-to-prepare-network-documentation-for-pci-dss-compliance-requirements","status":"publish","type":"post","link":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/","title":{"rendered":"How to Prepare Network Documentation for PCI DSS Compliance Requirements?"},"content":{"rendered":"\n\n\n\n\n<p>PCI DSS requires organizations to establish and maintain a secure network with a secure configuration of firewalls and routers. By taking advantage of network security controls, organizations can prevent criminals from accessing payment system networks and stealing cardholder data.<\/p>\n\n\n\n<p>The development and maintenance of network documentation are covered by PCI DSS Requirements 1.1.2 and 1.1.3. Basically, network documentation consists of a network diagram and data flow diagram.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-1\/\">See Also: PCI DSS Requirement 1 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Some of the diagrams&#8217; requirements include the creation of network infrastructure and data flow diagrams for the Cardholder Data Environment (CDE). Correct documentation assures both your company and your QSA that your network is set up securely.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-network-and-data-flow-diagrams\/\">See Also: PCI DSS Network and Data Flow Diagrams<\/a><\/strong><\/p>\n\n\n\n<p>PCI DSS Requirement 1.1.2 states that organizations must have an existing network diagram that defines all connections between the Cardholder Data Environment (CDE) and other networks, including all wireless networks.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-firewall-requirements\/\">See Also: PCI DSS Firewall Requirements<\/a><\/strong><\/p>\n\n\n\n<p>PCI DSS Requirement 1.1.3 requires organizations to have an up-to-date diagram showing all cardholder data flows between systems and networks.<\/p>\n\n\n\n<p>Network documentation is essential for network maintenance, security design, and incident response tasks. Network documentation will always be essential for your institution. Network diagrams help define and visualize the entire PCI DSS scope or CDE.<\/p>\n\n\n\n<p>Your network documentation should include the following:<\/p>\n\n\n\n<ul>\n<li>Methods used to control traffic inside and outside your network<\/li>\n\n\n\n<li>Where your firewalls are located<\/li>\n\n\n\n<li>Where your routers and switches are located<\/li>\n\n\n\n<li>Intrusion Detection Systems (IDS) \/ Intrusion Prevention Systems (IPS)<\/li>\n\n\n\n<li>Demilitarized Zone (DMZ)<\/li>\n\n\n\n<li>Wireless Networks<\/li>\n\n\n\n<li>Remote access points<\/li>\n\n\n\n<li>Operating systems<\/li>\n\n\n\n<li>Applications<\/li>\n\n\n\n<li>Anti-virus<\/li>\n\n\n\n<li>Databases<\/li>\n\n\n\n<li>Email servers<\/li>\n\n\n\n<li>DNS server<\/li>\n<\/ul>\n\n\n\n<p>The first step in PCI compliance is to make sure you meet the minimum requirements described below. With the tips below, you can streamline the process of creating professional diagrams and networking documentation that meet PCI compliance and help manage your network through the exchange.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Create a formal testing process and attach it to the network document.<\/strong><\/h2>\n\n\n\n<p>A systematic testing procedure for any firewall and router settings changes should be included in network documentation and information security policy. One way to test for changes in the firewall configuration is to perform a detailed port scan of the hosts protected by the firewall. Another way to test changes to the router configuration is to use the ping and traceroute commands common to most network-enabled operating systems.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Create your updated network diagram and attach it to the network document.<\/strong><\/h2>\n\n\n\n<p>The network documentation should include an up-to-date network diagram showing all network connections to cardholder data. You must specify all network devices in the PCI DSS scope, especially the components that store, transmit, and store cardholder data in your network diagram.<\/p>\n\n\n\n<p>The network diagram should also consider all entities in your environment, or at least asset types. You need to specify exactly where your assets are, how they access media and define the methods and tools you use to control traffic.<\/p>\n\n\n\n<p>As part of the network documentation, you need to indicate where your firewalls and routers are located, whether you have wireless devices. Whether they are covered or not, if wireless devices are in your environment, they should be shown in the network diagram.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/what-is-documentation-security-and-why-it-matters\/\">See Also: What Is Documentation Security and Why It Matters?<\/a><\/strong><\/p>\n\n\n\n<p>If you are being evaluated against PCI standards, you must have a firewall between your cardholder data environment and your wireless access points.<\/p>\n\n\n\n<p>Your network diagram should also show where your IPS \/ IDS is located. Evaluators need to see that they are positioned in front of your network and other areas in your environment that you can identify to be critical.<\/p>\n\n\n\n<p>Once all relevant network devices are paired, draw the network connections between them, including wireless connections, and make connections between external networks such as the Internet. Ensure you keep the network diagram up to date and delegate responsibility for maintaining network documentation to qualified personnel.<\/p>\n\n\n\n<p>The aim of data flow and network diagrams is to help your company and employees understand where these assets should be completely protected. You&#8217;re probably not defending your properties properly if you don&#8217;t know where they are.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Create your cardholder data flow diagram and attach it to your network document.<\/strong><\/h2>\n\n\n\n<p>Determine where cardholder data is stored on your network and how it flows across the network. Make a copy of the network diagram and add the necessary information to explain cardholder data flow.<\/p>\n\n\n\n<p>The purpose of having data flowcharts is for your organization to understand precisely where sensitive assets such as cardholder data are located across your entire network. If you are not aware of where your assets are currently located, you are probably not properly protecting them.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-policy-and-procedure-documentation\/\">See Also: What are the Required Policy and Procedure Documents for PCI DSS?<\/a><\/strong><\/p>\n\n\n\n<p>Keeping updated network documents, such as network diagrams and data flow charts, can prevent your organization from unknowingly overlooking cardholder data that is left outside security controls and is open to unauthorized access.<\/p>\n\n\n\n<p>Using diagramming programs for network documentation will significantly simplify the process. This way, you get professional templates representing a wide variety of network components, which reduces the overall time required to create an accurate and professional-looking network diagram. Also, diagramming programs make it easy to keep your documents up to date because you add lines or segments for every new component you add to your network.<\/p>\n\n\n\n<p>Choosing the right diagram solution can help you collaborate more effectively with others and manage your network documents&#8217; storage and version control in a secure, accessible way.<\/p>\n\n\n\n<p>The platform you choose should include access rights and revision history so you can limit access to authoritative documents, see who changed what, access previous diagrams to fix errors, and get a historical view of the system.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Add a firewall requirement for every Internet connection and DMZ.<\/strong><\/h2>\n\n\n\n<p>Network documentation must require a firewall on every Internet connection and between any DMZ and the internal network. &#8220;A firewall must be placed on any Internet connection and between every DMZ and the internal network,&#8221; a paragraph in the network documentation may be added to satisfy this requirement. Start by installing firewalls on every Internet connection and between each DMZ and the internal network.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Include descriptions of groups, roles, and responsibilities.<\/strong><\/h2>\n\n\n\n<p>Network documents should contain descriptions of network management roles and responsibilities. Identify network management roles such as network administrators, system administrators, and information security officers. Assign responsibilities to each network management role and document related responsibilities.<\/p>\n\n\n\n<p>In small companies, only one person will be responsible for keeping a particular piece of document current and accurate. But in large companies, multiple people are often concerned with maintaining network infrastructure, handling card data, and completing other tasks that affect your PCI compliance. As a result, numerous versions of the same documents are found in emails, network shares, and separate machines, making it challenging to find the latest and most complete document.<\/p>\n\n\n\n<p>Maintain a single up-to-date resource with permission-based controls for viewing, commenting, and editing so you can easily share documents while collecting entries and making changes to your infrastructure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Describe all required protocols for the job in the network document.<\/strong><\/h2>\n\n\n\n<p>It can help define the required protocols, define the network applications used by the business, and include the relevant protocols and ports used by the applications. A scanning tool quickly reveals the specific ports and protocols used by most network applications. If custom port settings are used, which is good practice to prevent automated attacks, custom port settings should be documented.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Identify unsecure protocols and explain why they are needed.<\/strong><\/h2>\n\n\n\n<p>Network documentation should include a list of all unsecured network protocols and explanations for why each is required for business operations. Some common Internet protocols such as FTP that send authentication information in plain text have proven unsafe. Some email protocols may also send authentication information in clear text, often overlooked because email is an integral part of many business environments.<\/p>\n\n\n\n<p>Verify that any unsafe service is required and cannot be easily replaced with a secure version, for example, by replacing telnet with SSH. If possible, add security measures to every unsafe service using technologies such as VPN, whitelists, or application-specific extensions. Ensure you thoroughly document each insecure service, including the nature of the vulnerability and the mitigation measures applied.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Explicitly authorize necessary connections from the cardholder data environment to the Internet.<\/strong><\/h2>\n\n\n\n<p>Extract a list of outbound connections from the cardholder data environment to the Internet and specify local and remote hosts\/ports for each connection.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Document the firewall ruleset.<\/strong><\/h2>\n\n\n\n<p>Firewalls should inherently block all traffic that is not required for business operations. The network documentation should include descriptions of the restrictions imposed by each firewall. It should also be documented that &#8220;deny&#8221; or &#8220;deny all&#8221; rules are included in the set.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Include a requirement to review firewall and router configurations at least every six months.<\/strong><\/h2>\n\n\n\n<p>Network documentation should include the requirement to review firewall and router configurations at least every six months. Delegate the responsibility of reviewing the router and firewall configurations to qualified personnel to ensure that the review was done.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/firewall-rule-review-for-pci-compliance\/\">See Also: Firewall Rule Reviews For PCI Compliance<\/a><\/strong><\/p>\n\n\n\n<p>When your organization makes a change in your network environment, you must also update the network documentation. Basically, the sources of network documents are the data flow diagram and network diagram. Therefore, if you are going to change your network environment, you need to make sure that you keep these documents appropriately up to date.<\/p>\n\n\n\n<p>Network documentation is up-to-date doesn&#8217;t just mean changing their date. When assessors come to your environment, they should look through the documentation and see that the data is up to date, and then they will compare the diagrams with your environment.<\/p>\n\n\n\n<p>However, you should understand that just because you changed the dates does not mean that the network diagram is up to date. Ideally, updates should correctly display network documentation in your change management.<\/p>\n\n\n\n<p>After you create your network documents, review and update your diagrams as changes are made to ensure that your document reflects your current network and business processes accurately.<\/p>\n\n\n\n<p>The review will inform you of potential network vulnerabilities and provide the necessary documented information your auditor will need to verify your following assessment&#8217;s PCI compliance.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Network documentation is essential for network maintenance, security design, and incident response tasks. Network documentation will always be essential for your institution.<\/p>\n","protected":false},"author":1,"featured_media":1251,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[121,49,23],"tags":[124,3858,3859],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How to Prepare Network Documentation for PCI DSS Compliance Requirements? - PCI DSS GUIDE<\/title>\n<meta name=\"description\" content=\"Basically, PCI DSS network documentation consists of a network diagram and data flow diagram.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Prepare Network Documentation for PCI DSS Compliance Requirements? - PCI DSS GUIDE\" \/>\n<meta property=\"og:description\" content=\"Basically, PCI DSS network documentation consists of a network diagram and data flow diagram.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/\" \/>\n<meta property=\"og:site_name\" content=\"PCI DSS GUIDE\" \/>\n<meta property=\"article:published_time\" content=\"2021-03-26T07:51:26+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-09T16:25:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"554\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Surkay Baykara\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Surkay Baykara\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/\"},\"author\":{\"name\":\"Surkay Baykara\",\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741\"},\"headline\":\"How to Prepare Network Documentation for PCI DSS Compliance Requirements?\",\"datePublished\":\"2021-03-26T07:51:26+00:00\",\"dateModified\":\"2023-10-09T16:25:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/\"},\"wordCount\":1699,\"publisher\":{\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741\"},\"image\":{\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg\",\"keywords\":[\"documantation\",\"firewall documentation\",\"network documentation\"],\"articleSection\":[\"Documentation\",\"Firewall\",\"PCI DSS Requirement 1\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/\",\"url\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/\",\"name\":\"How to Prepare Network Documentation for PCI DSS Compliance Requirements? - PCI DSS GUIDE\",\"isPartOf\":{\"@id\":\"https:\/\/pcidssguide.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg\",\"datePublished\":\"2021-03-26T07:51:26+00:00\",\"dateModified\":\"2023-10-09T16:25:21+00:00\",\"description\":\"Basically, PCI DSS network documentation consists of a network diagram and data flow diagram.\",\"breadcrumb\":{\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#primaryimage\",\"url\":\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg\",\"contentUrl\":\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg\",\"width\":1200,\"height\":554,\"caption\":\"pci dss Network Documentation\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/pcidssguide.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How to Prepare Network Documentation for PCI DSS Compliance Requirements?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/pcidssguide.com\/#website\",\"url\":\"https:\/\/pcidssguide.com\/\",\"name\":\"PCI DSS GUIDE\",\"description\":\"PCI Compliance Guide For All Business\",\"publisher\":{\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/pcidssguide.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741\",\"name\":\"Surkay Baykara\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b90b993a161f1830913c4409f7b4faa0?s=96&d=monsterid&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b90b993a161f1830913c4409f7b4faa0?s=96&d=monsterid&r=g\",\"caption\":\"Surkay Baykara\"},\"logo\":{\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/image\/\"},\"description\":\"A passionate Senior Information Security Consultant working at Cyberwise. Over the past 15+ years my professional career has included several positions beginning as a developer and IT administrator, working my way up to a senior Technical Performance Consultant before joining Biznet back in 2015. I had several different roles at Cyberwise, including Penetration Tester and PCI DSS QSA. In my job as a QSA, I found my passion and worked closely with the Audit and Compliance team. I've been working inside InfoSec for over 15 years, coming from a highly technical background. I have earned several certifications during my professional career including; CEH, CISA, CISSP, and PCI QSA.\",\"sameAs\":[\"https:\/\/www.pcidssguide.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Prepare Network Documentation for PCI DSS Compliance Requirements? - PCI DSS GUIDE","description":"Basically, PCI DSS network documentation consists of a network diagram and data flow diagram.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/","og_locale":"en_US","og_type":"article","og_title":"How to Prepare Network Documentation for PCI DSS Compliance Requirements? - PCI DSS GUIDE","og_description":"Basically, PCI DSS network documentation consists of a network diagram and data flow diagram.","og_url":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/","og_site_name":"PCI DSS GUIDE","article_published_time":"2021-03-26T07:51:26+00:00","article_modified_time":"2023-10-09T16:25:21+00:00","og_image":[{"width":1200,"height":554,"url":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg","type":"image\/jpeg"}],"author":"Surkay Baykara","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Surkay Baykara","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#article","isPartOf":{"@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/"},"author":{"name":"Surkay Baykara","@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741"},"headline":"How to Prepare Network Documentation for PCI DSS Compliance Requirements?","datePublished":"2021-03-26T07:51:26+00:00","dateModified":"2023-10-09T16:25:21+00:00","mainEntityOfPage":{"@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/"},"wordCount":1699,"publisher":{"@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741"},"image":{"@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#primaryimage"},"thumbnailUrl":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg","keywords":["documantation","firewall documentation","network documentation"],"articleSection":["Documentation","Firewall","PCI DSS Requirement 1"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/","url":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/","name":"How to Prepare Network Documentation for PCI DSS Compliance Requirements? - PCI DSS GUIDE","isPartOf":{"@id":"https:\/\/pcidssguide.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#primaryimage"},"image":{"@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#primaryimage"},"thumbnailUrl":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg","datePublished":"2021-03-26T07:51:26+00:00","dateModified":"2023-10-09T16:25:21+00:00","description":"Basically, PCI DSS network documentation consists of a network diagram and data flow diagram.","breadcrumb":{"@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#primaryimage","url":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg","contentUrl":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2021\/03\/pci-dss-Network-Documentation.jpg","width":1200,"height":554,"caption":"pci dss Network Documentation"},{"@type":"BreadcrumbList","@id":"https:\/\/pcidssguide.com\/how-to-prepare-network-documentation-for-pci-dss-compliance-requirements\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pcidssguide.com\/"},{"@type":"ListItem","position":2,"name":"How to Prepare Network Documentation for PCI DSS Compliance Requirements?"}]},{"@type":"WebSite","@id":"https:\/\/pcidssguide.com\/#website","url":"https:\/\/pcidssguide.com\/","name":"PCI DSS GUIDE","description":"PCI Compliance Guide For All Business","publisher":{"@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pcidssguide.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741","name":"Surkay Baykara","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b90b993a161f1830913c4409f7b4faa0?s=96&d=monsterid&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b90b993a161f1830913c4409f7b4faa0?s=96&d=monsterid&r=g","caption":"Surkay Baykara"},"logo":{"@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/image\/"},"description":"A passionate Senior Information Security Consultant working at Cyberwise. Over the past 15+ years my professional career has included several positions beginning as a developer and IT administrator, working my way up to a senior Technical Performance Consultant before joining Biznet back in 2015. I had several different roles at Cyberwise, including Penetration Tester and PCI DSS QSA. In my job as a QSA, I found my passion and worked closely with the Audit and Compliance team. I've been working inside InfoSec for over 15 years, coming from a highly technical background. I have earned several certifications during my professional career including; CEH, CISA, CISSP, and PCI QSA.","sameAs":["https:\/\/www.pcidssguide.com"]}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/posts\/1250"}],"collection":[{"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/comments?post=1250"}],"version-history":[{"count":2,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/posts\/1250\/revisions"}],"predecessor-version":[{"id":2317,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/posts\/1250\/revisions\/2317"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/media\/1251"}],"wp:attachment":[{"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/media?parent=1250"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/categories?post=1250"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/tags?post=1250"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}