Requirement 5: Protect all systems against malware and regularly update anti-virus software or programs

Although antivirus software is outside the scope of WebSphere Commerce, protecting your servers and network from malicious software should always be a priority for a responsible network administrator. WebSphere Commerce is designed, developed and tested on systems running antivirus software.

Note: During the WebSphere Commerce installation process, you may need to temporarily disable your antivirus software. Ensure you re-enable it before the system is connected to a production environment or begins handling customer data.

Refer directly to the PCI DSS for details on this requirement.

Previous topic: Requirement 4: Encrypt transmission of cardholder data across open, public networks

Next topic: Requirement 6: Develop and maintain secure systems and applications

Related concepts
WebSphere Commerce and the PCI Data Security Standard