Examine data sources including: 3.2.2 The card verification code or value (three-digit or four-digit number printed on the front or back of a payment card) is Incoming transaction data not stored after authorization? All logs History files Database schema Database contents Examine data sources including: 3.2.3 The personal identification number (PIN) or the encrypted PIN is not stored after authorization? Incoming transaction data All logs History files Trace files Database schema Database contents 3.3 Is the PAN masked when displayed (the first six and last Review policies and procedures four digits are the maximum number of digits to be Review roles that need access to displayed) such that only personnel with a legitimate displays of full PAN business need can see the full PAN? Examine system configurations Note: This requirement does not supersede stricter Observe displays of PAN requirements in place for displays of cardholder data—for example, legal or payment card brand requirements for point-of-sale (POS) receipts. Requirement 4: Encrypt transmission of cardholder data across open, public networks Response PCI DSS Question Expected one response for each question)
3.2.2 The card verification code or value (three-digit or four-digit number printed on the front or back of a payment card) is not stored after authorization? Examine data sources including: Incoming transaction data All logs History files Database schema Database contents 3.2.3 The personal identification number (PIN) or the encrypted PIN is not stored after authorization? Examine data sources including: Incoming transaction data All logs History files Trace files Database schema Database contents 3.3 Is the PAN masked when displayed (the first six and last four digits are the maximum number of digits to be displayed) such that only personnel with a legitimate business need can see the full PAN? Note: This requirement does not supersede stricter requirements in place for displays of cardholder data—for example, legal or payment card brand requirements for point-of-sale (POS) receipts. Review policies and procedures Review roles that need access to displays of full PAN Examine system configurations Observe displays of PAN Requirement 4: Encrypt transmission of cardholder data across open, public networks PCI DSS Question Expected Response one response for each question)