IBM BigFix Compliance PCI Add-on
Security Configuration Management (SCM)
IBM is pleased to announce the availability of the new security configuration management checklists for IBM BigFix Compliance PCI Add-on. The new checklists that are based on the guidance provided by the Payment Card Industry Data Security Standard (PCI DSS) is:
Published site:
PCI DSS Checklist for Windows Embedded POSReady 2009, version 2
*Site versions are provided for air-gap customers.
This content contains security configuration checks that evaluate the security settings of your endpoints according to the PCI DSS standard. As with most of the existing SCM content in the IBM BigFix Compliance PCI Add-on library, most checks include a corresponding analysis property to report actual values, as well as steps for manual remediation in the check description.
Some of the checks allow you to use the parameterized setting to enable customization for compliance evaluation. Note that parameterization requires the creation of a custom site.
ACTIONS TO TAKE:
- If you were involved in the Early Access Program for PCI DSS Security and Compliance, unsubscribe from the beta sites to avoid any conflicting issues with the production sites. If you do not unsubscribe from the beta sites, the content in the production sites will fail.
- If you are entitled to the new content and you are using IBM BigFix version 9.0 and later, you can use the License Overview dashboard to enable and gather the sites.
- If you are currently licensed for the IBM BigFix Compliance, the BigFix SCMv3 solution module, the BigFix SCVM solution pack, or the BigFix SLM+SCVM solution bundle, contact your IBM sales representative on how to get access to the new content.
Documentation:
For more information, see the IBM BigFix Compliance PCI Add-on v1.2 Users Guide at https://ibm.biz/BdHJyt.
We hope you find this latest release of SCM content useful. Thank you!
– The IBM BigFix Compliance PCI Add-on team