LiveBlog: PCI 1.2 Review, Anti-Virus
We're just reviewing these changes and before hundreds of people queued up at the microphone, the intent of the change is to prevent an "automatic exclusion" of Unix or Mainframe technologies. Looks like Anti-Virus is now a case-by-case basis for review.
My opinion is that ANY desktop computer with access to the internet should have A/V on it as it is at a higher risk for compromise. In some cases there can be exceptions, and technologies like Solidcore and/or Bit9 can be excellent compensating controls.
