8.5 Are shared, or generic accounts, passwords, or other Review policies and procedures authentication methods prohibited as follows: Examine user ID lists Generic user IDs and accounts are disabled or Interview personnel removed; Shared user IDs for system administration activities and other critical functions do not exist; and Shared and generic user IDs are not used to administer any system components? 8.8 Are security policies and operational procedures for Examine security policies and identification and authentication: operational procedures Documented Interview personnel In use Known to all affected parties? Requirement 9: Restrict physical access to cardholder data Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Yes CCW No N/A
8.5 Are shared, or generic accounts, passwords, or other authentication methods prohibited as follows: Generic user IDs and accounts are disabled or removed; Shared user IDs for system administration activities and other critical functions do not exist; and Shared and generic user IDs are not used to administer any system components? Review policies and procedures Examine user ID lists Interview personnel 8.8 Are security policies and operational procedures for identification and authentication: Documented In use Known to all affected parties? Examine security policies and operational procedures Interview personnel Requirement 9: Restrict physical access to cardholder data PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A
pci-dss-v3_2-saq-c-rev1_1.docx