This policy covers scanning for security vulnerabilities on devices exposed to the internet or devices. This is a security standard as well as a PCI regulation.
View the Vulnerability Scanning Policy.