Laserfiche WebLink
• Security <br />Standards Council <br />Part 2g. Summary of Requirements Tested <br />For each PCI DSS Requirement, select one of the following: <br />• Full — The requirement and all sub -requirements of that requirement were assessed, and no sub - <br />requirements were marked as "Not Tested" or "Not Applicable' in the ROC. <br />• Partial — One or more sub -requirements of that requirement were marked as "Not Tested" or "Not <br />Applicable' in the ROC. <br />• None — All sub -requirements of that requirement were marked as "Not Tested" and/or "Not Applicable" <br />in the ROC. <br />For all requirements identified as either "Partial' or "None," provide details in the "Justification for Approach" <br />column, including: <br />• Details of specific sub -requirements that were marked as either "Not Tested" and/or "Not Applicable" in <br />the ROC <br />• Reason why sub-requirement(s) were not tested or not applicable <br />Note: One table to be completed for each service covered by this AOC. Additional copies of this section are <br />available on the PCI SSC website. <br />Name of Service Assessed: <br />Payment Gateway Service <br />Details of Requirements Assessed <br />Justification for Approach <br />PCI DSS <br />(Required for all "Partial' and "None" responses. Identify which <br />Requirement <br />Full <br />Partial <br />None <br />sub -requirements were not tested and the reason.) <br />Requirement 1: <br />N <br />❑ <br />❑ <br />Requirement 2: <br />❑ <br />N <br />2.1.1 — No in -scope wireless <br />2.2.3 — No insecure services, protocols, or daemons <br />2.6 — Not a shared hosting provider <br />Requirement 3: <br />❑ <br />® <br />3.4.1 — No FDE in use <br />3.6 — No shared keys for transmission of CHD <br />3.6.6— No manual clear -text key -management <br />Requirement 4: <br />❑ <br />N <br />❑ <br />4.1.1 — No in -scope wireless <br />Requirement 5: <br />N <br />❑ <br />❑ <br />Requirement 6: <br />❑ <br />® <br />❑ <br />6.4.6— No significant changes <br />Requirement 7: <br />N <br />❑ <br />❑ <br />Requirement 8: <br />❑ <br />N <br />❑ <br />8.5.1 — No remote access to customer premises <br />Requirement 9: <br />N <br />9.5.1 — CHD is never backed up to removable media <br />9.6 — CHD is never backed up to removable media <br />9.6.[2-3] — CHD is never backed up to removable <br />media <br />PCI O9yvCZO ttitation of Compliance for Onsite Assessme23-6"ice Providers, Rev. 1.0 2/7/20232018 <br />© 2006-2018 PC/ Security Standards Council, LLC. All Rights Reserved. Page 7 <br />