SYSTEM INNOVATORS (4) - Laserfiche WebLink

Home Browse Search

Secunly Standards Part 3a. Acknowledgement of Status (continued) ® No evidence of full track data', CAV2, CVC2, CID, or CVV2 dataz, or PIN data' storage after transaction authorization was found on ANY system reviewed during this assessment. ® ASV scans are being completed by the PCI SSC Approved Scanning Vendor Tenable Network Security Part 3b. Service Provider Attestation Signature of Service Provider Executive Officer T Date: 29 Jun 2021 Service Provider Executive Officer Name: Brent Johnson Title: C/SO Part 3c. Qualified Security Assessor (QSA) Acknowledgement (if applicable) If a QSA was involved or assisted with this Performed PC/ DSS assessment, performed review of evidence, assessment, describe the role performed: performed scope validation, completed Report On Compliance and Attestation Of Compliance. Signature of Duly Authorized Officer of QSA Company Date: 29 Jun 2021 Duly Authorized Officer Name: Shawn Shifgett QSA Company: Foregenix Ltd Part 3d. Internal Security Assessor (ISA) Involvement (if applicable) If an ISA(s) was involved or assisted with Not applicable. this assessment, identify the ISA personnel and describe the role performed: ' Data encoded in the magnetic stripe or equivalent data on a chip used for authorization during a card -present transaction. Entities may not retain full track data after transaction authorization. The only elements of track data that may be retained are primary account number (PAN), expiration date, and cardholder name. 2 The three- or four -digit value printed by the signature panel or on the face of a payment card used to verify card -not -present transactions. ' Personal identification number entered by cardholder during a card -present transaction, and/or encrypted PIN block present within the transaction message. PC/ DSS v3.2.1 Attestation of Compliance for Onsite Assessments— Service Providers, Rev. 1.0 June 2018 © 2006-2018 PC/ Security Standards Council, LLC. All Rights Reserved. Page 11