Quarantine

PCIComplianceHubLast updated

The process of isolating potentially malicious or compromised systems, files, or users from a network or system to prevent further damage or data loss. Implementing quarantine measures can be a key part of incident response and maintaining PCI DSS compliance in the face of security threats.

Applies to. PCI DSS v4.0.1 does not use the word quarantine. The anti-malware solution required under Requirement 5 must remove, block or contain all known types of malware, and quarantining an infected file is the usual form containment takes; the same requirement stops users disabling or altering those mechanisms without documented, time-limited management authorisation. Isolating a compromised system during an incident belongs to the incident response plan under Requirement 12.
Related. Anti-Malware, Malware, Incident Response Plan, Compromise, Network Segmentation
Sources. PCI DSS v4.0.1 (June 2024)