Wireless Intrusion Prevention System (WIPS)
PCIComplianceHubLast updated
A security solution designed to detect, prevent, and mitigate unauthorized access or attacks on wireless networks. WIPS can help organizations protect their wireless networks and maintain PCI DSS compliance.
Applies to. PCI DSS v4.0.1 does not name WIPS in its requirements. It comes up under Requirement 11, which asks that authorised and unauthorised wireless access points are tested for, detected and identified at least once every three months and that, where automated monitoring is used, personnel are alerted; a WIPS is one way to run that automated monitoring, and its alerts then belong in the incident response plan under Requirement 12.
Limits. The standard does not require a WIPS. Testing at least once every three months by other means satisfies the detection requirement; automated monitoring is optional, and where used it must generate alerts.
Related. Wireless Access Point (WAP), Wireless Local Area Network (WLAN), Intrusion Prevention System (IPS), Intrusion Detection System (IDS), Incident Response Plan
Sources. PCI DSS v4.0.1 (June 2024)