Is administrator access to web-based management Examine system components interfaces encrypted with strong cryptography? Observe an administrator log on For the technology in use, is strong cryptography Examine system components implemented according to industry best practice Review vendor documentation and/or vendor recommendations? Interview personnel Protect Cardholder Data Requirement 3: Protect stored cardholder data Response one response for each question) PCI DSS Question Expected Testing Yes with Yes CCW No N/A (c) Is sensitive authentication data deleted or 3.2 Review policies and procedures rendered unrecoverable upon completion of the Examine system configurations authorization process? Examine deletion processes (d) Do all systems adhere to the following requirements regarding non-storage of sensitive authentication data after authorization (even if encrypted):
Is administrator access to web-based management interfaces encrypted with strong cryptography? Examine system components Observe an administrator log on For the technology in use, is strong cryptography implemented according to industry best practice and/or vendor recommendations? Examine system components Review vendor documentation Interview personnel Protect Cardholder Data Requirement 3: Protect stored cardholder data PCI DSS Question Expected Testing Response one response for each question) Yes Yes with CCW No N/A 3.2 (c) Is sensitive authentication data deleted or rendered unrecoverable upon completion of the authorization process? Review policies and procedures Examine system configurations Examine deletion processes (d) Do all systems adhere to the following requirements regarding non-storage of sensitive authentication data after authorization (even if encrypted):
SAQ_B-IP.docx