3 Protect stored cardholder data Encrypt transmission of cardholder 4 data across open, public networks Protect all systems against 5 malware and regularly update software or programs Develop and maintain secure 6 systems and applications Restrict access to cardholder data 7 by business need to know Identify and authenticate access to 8 system components Restrict physical access to 9 cardholder data Track and monitor all access to 10 network resources and cardholder data Regularly test security systems 11 and processes Maintain a policy that addresses 12 information security for all personnel * PCI DSS Requirements indicated here refer to the questions in Section 2 of the SAQ.
3 Protect stored cardholder data 4 Encrypt transmission of cardholder data across open, public networks 5 Protect all systems against malware and regularly update software or programs 6 Develop and maintain secure systems and applications 7 Restrict access to cardholder data by business need to know 8 Identify and authenticate access to system components 9 Restrict physical access to cardholder data 10 Track and monitor all access to network resources and cardholder data 11 Regularly test security systems and processes 12 Maintain a policy that addresses information security for all personnel * PCI DSS Requirements indicated here refer to the questions in Section 2 of the SAQ.
AOC_SAQ_A-EP_v3-1_rev1-1.docx