Select the appropriate response for to PCI DSS Requirements” for each requirement. If you “Compliant answer to any of the requirements, you may be required to provide the date your Company expects to “No” be compliant with the requirement and a brief description of the actions being taken to meet the requirement. Check with your acquirer or the payment brand(s) before completing Part 4. Compliant to PCI Remediation Date and DSS Requirements PCI DSS Actions Description of Requirement Requirement* (Select One) (If selected for any “NO” Requirement) YES NO Install and maintain a firewall 1 configuration to protect cardholder data Do not use vendor-supplied 2 defaults for system passwords and other security parameters 3 Protect stored cardholder data Encrypt transmission of 4 cardholder data across open, public networks Develop and maintain secure 6 systems and applications Restrict access to cardholder 7 data by business need to know Identify and authenticate access 8 to system components Restrict physical access to 9 cardholder data Regularly test security systems 11 and processes Maintain a policy that addresses 12 information security for all personnel Additional PCI DSS Appendix A2 Requirements for Entities using SSL/early TLS * PCI DSS Requirements indicated here refer to the questions in Section 2 of the SAQ.
Select the appropriate response for “Compliant to PCI DSS Requirements” for each requirement. If you answer “No” to any of the requirements, you may be required to provide the date your Company expects to be compliant with the requirement and a brief description of the actions being taken to meet the requirement. Check with your acquirer or the payment brand(s) before completing Part 4. PCI DSS Requirement* Description of Requirement Compliant to PCI DSS Requirements (Select One) Remediation Date and Actions (If “NO” selected for any Requirement) YES NO 1 Install and maintain a firewall configuration to protect cardholder data 2 Do not use vendor-supplied defaults for system passwords and other security parameters 3 Protect stored cardholder data 4 Encrypt transmission of cardholder data across open, public networks 6 Develop and maintain secure systems and applications 7 Restrict access to cardholder data by business need to know 8 Identify and authenticate access to system components 9 Restrict physical access to cardholder data 11 Regularly test security systems and processes 12 Maintain a policy that addresses information security for all personnel Appendix A2 Additional PCI DSS Requirements for Entities using SSL/early TLS * PCI DSS Requirements indicated here refer to the questions in Section 2 of the SAQ.
AOC-SAQ_B_IP-v3_2-rev1_1.docx