(b) Have personnel at locations received Interview personnel at POS training, and are they aware of procedures to detect locations and report attempted tampering or replacement of devices? 9.10 Are security policies and operational procedures for Examine security policies and restricting physical access to cardholder data: operational procedures Documented Interview personnel In use Known to all affected parties? Regularly Monitor and Test Networks Requirement 10: Track and monitor all access to network resources and cardholder data Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Not Yes CCW No N/A Tested Are audit trails enabled and active for system 10.1 Observe processes components? Interview system administrator Is access to system components linked to Observe processes individual users? Interview system administrator 10.2 Are automated audit trails implemented for all system components to reconstruct the following events:
(b) Have personnel at locations received training, and are they aware of procedures to detect and report attempted tampering or replacement of devices? Interview personnel at POS locations 9.10 Are security policies and operational procedures for restricting physical access to cardholder data: Documented In use Known to all affected parties? Examine security policies and operational procedures Interview personnel Regularly Monitor and Test Networks Requirement 10: Track and monitor all access to network resources and cardholder data PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A Not Tested 10.1 Are audit trails enabled and active for system components? Observe processes Interview system administrator Is access to system components linked to individual users? Observe processes Interview system administrator 10.2 Are automated audit trails implemented for all system components to reconstruct the following events:
PCI-DSS-v3_2-SAQ-D_Merchant.docx