Virus

PCIComplianceHubLast updated

A type of malicious software that can replicate itself and spread from one system to another, often causing harm or unauthorized access to data. Protecting systems against viruses is an important aspect of maintaining PCI DSS compliance.

Applies to. PCI DSS v4.0.1 does not name viruses; its term is malware. In general usage a virus is one type of malware, so it falls under Requirement 5, where the anti-malware solution must detect all known types of malware, remove, block or contain them, and stay current through automatic updates.
Related. Malware, Anti-Malware, Ransomware, Rootkit
Sources. PCI DSS v4.0.1 (June 2024)