How and in what capacity does your business store, process and/or transmit cardholder data? Part 2c. Locations List types of facilities and a summary of locations (for example, retail outlets, corporate offices, data centers, call centers, etc.) included in the PCI DSS review. Number of facilities Type of facility of this type Location(s) of facility (city, country) Example: Retail outlets 3 Boston, MA, USA Part 2d. Payment Application Does the organization use one or more Payment Applications? Yes No Provide the following information regarding the Payment Applications your organization uses: Payment Application Version Application Is application PA-DSS Listing Expiry Name Number Vendor PA-DSS Listed? date (if applicable) Yes No Yes No Yes No Yes No Yes No Part 2e. Description of Environment Provide a high-level description of the environment covered by this assessment. For example: Connections into and out of the cardholder data environment (CDE). Critical system components within the CDE, such as POS devices, databases, web servers, etc., and any necessary payment components, as applicable. Does your business use network segmentation to affect the scope of your PCI DSS Yes No environment? (Refer to Segmentation” section of PCI DSS for guidance on network “Network segmentation)
How and in what capacity does your business store, process and/or transmit cardholder data? Part 2c. Locations List types of facilities and a summary of locations (for example, retail outlets, corporate offices, data centers, call centers, etc.) included in the PCI DSS review. Type of facility Number of facilities of this type Location(s) of facility (city, country) Example: Retail outlets 3 Boston, MA, USA Part 2d. Payment Application Does the organization use one or more Payment Applications? Yes No Provide the following information regarding the Payment Applications your organization uses: Payment Application Name Version Number Application Vendor Is application PA-DSS Listed? PA-DSS Listing Expiry date (if applicable) Yes No Yes No Yes No Yes No Yes No Part 2e. Description of Environment Provide a high-level description of the environment covered by this assessment. For example: Connections into and out of the cardholder data environment (CDE). Critical system components within the CDE, such as POS devices, databases, web servers, etc., and any necessary payment components, as applicable. Does your business use network segmentation to affect the scope of your PCI DSS environment? (Refer to “Network Segmentation” section of PCI DSS for guidance on network segmentation) Yes No
AOC_SAQ_B.docx