No evidence of full track data, CAV2, CVC2, CID, or CVV2 data, or PIN data storage after transaction authorization was found on ANY system reviewed during this assessment. ASV scans are being completed by the PCI SSC Approved Scanning Vendor (ASV Name) Part 3b. Service Provider Attestation Signature of Service Provider Executive Officer Date: Service Provider Executive Officer Name: Title: Part 3c. Qualified Security Assessor (QSA) Acknowledgement (if applicable) If a QSA was involved or assisted with this assessment, describe the role performed: Date: Duly Authorized Officer of Company Signature of QSA Duly Authorized Officer Name: QSA Company: Part 3d. Internal Security Assessor (ISA) Involvement (if applicable) If an ISA(s) was involved or assisted with this assessment, identify the ISA personnel and describe the role performed: Part 4. Action Plan for Non-Compliant Requirements Select the appropriate response for to PCI DSS Requirements” for each requirement. If you “Compliant answer to any of the requirements, you may be required to provide the date your Company expects to be “No” compliant with the requirement and a brief description of the actions being taken to meet the requirement. Check with the applicable payment brand(s) before completing Part 4. Compliant to PCI Remediation Date and DSS Requirements PCI DSS Actions Description of Requirement Requirement (Select One) (If selected for any “NO” Requirement) YES NO Install and maintain a firewall 1 configuration to protect cardholder data Do not use vendor-supplied defaults for 2 system passwords and other security parameters 3 Protect stored cardholder data
No evidence of full track data, CAV2, CVC2, CID, or CVV2 data, or PIN data storage after transaction authorization was found on ANY system reviewed during this assessment. ASV scans are being completed by the PCI SSC Approved Scanning Vendor (ASV Name) Part 3b. Service Provider Attestation Signature of Service Provider Executive Officer Date: Service Provider Executive Officer Name: Title: Part 3c. Qualified Security Assessor (QSA) Acknowledgement (if applicable) If a QSA was involved or assisted with this assessment, describe the role performed: Signature of Duly Authorized Officer of QSA Company Date: Duly Authorized Officer Name: QSA Company: Part 3d. Internal Security Assessor (ISA) Involvement (if applicable) If an ISA(s) was involved or assisted with this assessment, identify the ISA personnel and describe the role performed: Part 4. Action Plan for Non-Compliant Requirements Select the appropriate response for “Compliant to PCI DSS Requirements” for each requirement. If you answer “No” to any of the requirements, you may be required to provide the date your Company expects to be compliant with the requirement and a brief description of the actions being taken to meet the requirement. Check with the applicable payment brand(s) before completing Part 4. PCI DSS Requirement Description of Requirement Compliant to PCI DSS Requirements (Select One) Remediation Date and Actions (If “NO” selected for any Requirement) YES NO 1 Install and maintain a firewall configuration to protect cardholder data 2 Do not use vendor-supplied defaults for system passwords and other security parameters 3 Protect stored cardholder data
PCI-DSS-v3_2-AOC-ServiceProviders.docx