12.8.4 Maintain a program to monitor service providers PCI DSS compliance – status annually. 12.8.5 Maintain details which PCI DSS requirements are managed by each – service provider and which by the entity. 31/07/2015 30/06/2017 Complete Self-Assessment SAQ A and record compliance with merchant services. PCI-DSS Compliance Plan - SAQ B For PDQ Dial Out Terminals 14/05/2015 31/07/2015 Requirement 3 Protect cardholder data: – 3.2 - Is sensitive data deleted after authorisation:- Review policies and procedures and examine deletion processes. 3.2.1 Magnetic strip data is not stored Examine data sources if applicable. – – 3.2.2 Card Verification code is not stored Examine data sources if applicable. – – 3.2.3 PIN is not stored - Examine data sources if applicable – 3.3 Is PAN masked? only personnel with a legitimate business need can see the full – PAN. Review policies and procedures, review roles. – 27/04/2015 31/07/2015 Requirement 4 Encrypt transmitted cardholder data across open public networks. –
12.8.4 – Maintain a program to monitor service providers PCI DSS compliance status annually. 12.8.5 – Maintain details which PCI DSS requirements are managed by each service provider and which by the entity. 31/07/2015 30/06/2017 Complete Self-Assessment SAQ A and record compliance with merchant services. PCI-DSS Compliance Plan - SAQ B For PDQ Dial Out Terminals 14/05/2015 31/07/2015 Requirement 3 – Protect cardholder data: 3.2 - Is sensitive data deleted after authorisation:- Review policies and procedures and examine deletion processes. 3.2.1 – Magnetic strip data is not stored – Examine data sources if applicable. 3.2.2 – Card Verification code is not stored – Examine data sources if applicable. 3.2.3 – PIN is not stored - Examine data sources if applicable 3.3 – Is PAN masked? only personnel with a legitimate business need can see the full PAN. – Review policies and procedures, review roles. 27/04/2015 31/07/2015 Requirement 4 – Encrypt transmitted cardholder data across open public networks.
compliance_plan_pcidss_v3.2_0.docx