SYSTEM INNOVATORS (4) - Laserfiche WebLink

Home Browse Search

Part 4. Action Plan for Non -Compliant Requirements Select the appropriate response for "Compliant to PCI DSS Requirements" for each requirement. If you answer "No" to any of the requirements, you may be required to provide the date your Company expects to be compliant with the requirement and a brief description of the actions being taken to meet the requirement. Check with the applicable payment brand(s) before completing Part 4. Compliant to PCI DSS Remediation Date and PCI DSS Description of Requirement Requirements Actions Requirement (Select One) (If "NO" selected for any Requirement) Install and maintain a firewall YES NO ® ❑ 1 configuration to protect cardholder data Do not use vendor -supplied defaults for 2 system passwords and other security parameters 3 Protect stored cardholder data 4 Encrypt transmission of cardholder data 0 ❑ across open, public networks Protect all systems against malware and ® ❑ 5 regularly update anti -virus software or programs 6 Develop and maintain secure systems and applications 7 Restrict access to cardholder data by business need to know Identify and authenticate access to ® ❑ 8 system components g Restrict physical access to cardholder data Track and monitor all access to network 10 resources and cardholder data 11 Regularly test security systems and processes 12 Maintain a policy that addresses information security for all personnel Appendix Al Additional PCI DSS Requirements for Shared Hosting Providers Additional PCI DSS Requirements for Appendix A2 Entities using SSL/early TLS for Card - Present POS POI Terminal Connections DISCiVER J3: W 1/IS mastercard ` JA PCI DSS v3.2.1 Attestation of Compliance for Onsite Assessments— Service Providers, Rev. 1.0 June 2018 © 2006-2018 PCI Security Standards Council, LLC. All Rights Reserved. Page 12