Secure Logging: the system should not log any Yes 36. sensitive data (e.g. PCI, PHI, PII, SSN,) into unprotected No log storage. n/a Yes 37 No n/a Yes 38 No n/a Yes 39 No n/a Yes 40. No n/a
36. Secure Logging: the system should not log any sensitive data (e.g. PCI, PHI, PII, SSN,) into unprotected log storage. Yes No n/a 37 Yes No n/a 38 Yes No n/a 39 Yes No n/a 40. Yes No n/a
Appendix-IX-Security-Questionnaire.docx