Protect Cardholder Data Requirement 3: Protect stored cardholder data Response (Check one response for each question) PCI DSS Question Expected Testing Yes with Yes CCW No N/A (c) Is sensitive authentication data deleted or rendered 3.2 Review policies and procedures unrecoverable upon completion of the Examine system configurations authorization process? Examine deletion processes (d) Do all systems adhere to the following requirements regarding non-storage of sensitive authentication data after authorization (even if encrypted): 3.2.2 The card verification code or (three-digit or Examine data sources including: number printed on the front or back of a payment Incoming transaction data card) is not stored after authorization? All logs History files Trace files Database schema Database contents 3.2.3 The personal identification number (PIN) or the Examine data sources including: encrypted PIN is not stored after authorization? Incoming transaction data All logs History files Trace files Database schema Database contents
Protect Cardholder Data Requirement 3: Protect stored cardholder data PCI DSS Question Expected Testing Response (Check one response for each question) Yes Yes with CCW No N/A 3.2 (c) Is sensitive authentication data deleted or rendered unrecoverable upon completion of the authorization process? Review policies and procedures Examine system configurations Examine deletion processes (d) Do all systems adhere to the following requirements regarding non-storage of sensitive authentication data after authorization (even if encrypted): 3.2.2 The card verification code or (three-digit or number printed on the front or back of a payment card) is not stored after authorization? Examine data sources including: Incoming transaction data All logs History files Trace files Database schema Database contents 3.2.3 The personal identification number (PIN) or the encrypted PIN is not stored after authorization? Examine data sources including: Incoming transaction data All logs History files Trace files Database schema Database contents
SAQ_C_VT.docx