12.8.5 Is information maintained about which PCI DSS Observe processes requirements are managed by each service provider, and Review policies and procedures which are managed by the entity? and supporting documentation [Business Affairs maintains this information for Elavon Merchant Services-provided POS devices.] [If not using Elavon Merchant Services-provided POS devices, ensure you have this information documented for your OST-approved 3rd party vendor.] 12.10.1 (a) Has an incident response plan been created to be Review the incident response plan implemented in the event of system breach? Review incident response plan procedures
12.8.5 Is information maintained about which PCI DSS requirements are managed by each service provider, and which are managed by the entity? Observe processes Review policies and procedures and supporting documentation [Business Affairs maintains this information for Elavon Merchant Services-provided POS devices.] [If not using Elavon Merchant Services-provided POS devices, ensure you have this information documented for your OST-approved 3rd party vendor.] 12.10.1 (a) Has an incident response plan been created to be implemented in the event of system breach? Review the incident response plan Review incident response plan procedures
saq_b_v3_1_instr.docx