Are hardcopy materials cross-cut shredded, 9.8.1 Review periodic media destruction incinerated, or pulped so that cardholder data policies and procedures cannot be reconstructed? Interview personnel Observe processes Are storage containers used for materials that Examine security of storage containers contain information to be destroyed secured to prevent access to the contents? Regularly Monitor and Test Networks Requirement 10: Track and monitor all access to network resources and cardholder data Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Yes CCW No N/A 10.2 Are automated audit trails implemented for all system components to reconstruct the following events: 10.2.2 All actions taken by any individual with root or Interview personnel administrative privileges? Observe audit logs Examine audit log settings 10.2.4 Invalid logical access attempts? Interview personnel Observe audit logs Examine audit log settings
9.8.1 Are hardcopy materials cross-cut shredded, incinerated, or pulped so that cardholder data cannot be reconstructed? Review periodic media destruction policies and procedures Interview personnel Observe processes Are storage containers used for materials that contain information to be destroyed secured to prevent access to the contents? Examine security of storage containers Regularly Monitor and Test Networks Requirement 10: Track and monitor all access to network resources and cardholder data PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A 10.2 Are automated audit trails implemented for all system components to reconstruct the following events: 10.2.2 All actions taken by any individual with root or administrative privileges? Interview personnel Observe audit logs Examine audit log settings 10.2.4 Invalid logical access attempts? Interview personnel Observe audit logs Examine audit log settings
PCI_DSS_v3-1_SAQ_A-EP_rev1-1.docx