PCI Compliance File Integrity Monitoring Checklist Form
Use this checklist to verify your organization's file integrity monitoring controls for PCI compliance.
Is a file integrity monitoring solution installed on all relevant systems?
*
Yes
No
Not Applicable
Are file change alerts configured and reviewed regularly?
*
Yes
No
Not Applicable
Are baseline configurations for monitored files established and maintained?
*
Yes
No
Not Applicable
Are unauthorized file changes promptly investigated?
*
Yes
No
Not Applicable
Are file integrity monitoring logs retained according to PCI requirements?
*
Yes
No
Not Applicable
Are file integrity monitoring controls tested at least annually?
*
Yes
No
Not Applicable
Are exceptions to file integrity monitoring documented and approved?
*
Yes
No
Not Applicable
Are file integrity monitoring alerts integrated with incident response procedures?
*
Yes
No
Not Applicable
Additional comments or supporting details
Submit Checklist
Should be Empty: