PCI Requirement 12.8.4 and 12.8.5 – Monitor Service Providers’ PCI DSS Compliance Status
PCI Requirement 12.8 & 12.8.1 – Manage Service Providers with Cardholder Data Access
PCI Requirement 12.8.3 – Ensure there is an Established Process for Engaging Service Providers
PCI Audits Done Right
PCI v4.0 - 12.9.2: Provide Compliance Information to Clients Upon Request
PCI Requirement 12.5.4 – Administer User Accounts, Including Additions, Deletions, and Modifications
PCI Requirement 12: Maintain a Policy that Addresses Information Security for All Personnel
PCI Requirement 12.3.5 – Acceptable Uses of the Technology
12.8 4
PCI Requirement 12.4 – Ensure Security Policies & Procedures Define Responsibilities for All
PCI Requirement 9.5 – Physically Secure all Media
PCI Requirement 12.3.10 – Prohibit the Moving of Cardholder Data onto Local Hard Drives
PCI Requirement 12.5 – Assign Information Security Management Responsibilities to a Team
PCI Requirement 12.3.6 – Acceptable Network Locations for the Technologies
PCI Requirement 12.3.2 – Authentication for Use of the Technology
PCI Requirement 12.6 – Implement a Formal Security Awareness Program
PCI Requirement 12.3.4 – A Method to Accurately Determine Owner, Contact Information, and Purpose
PCI Requirement 12.3.1 – Explicit Approval by Authorized Parties
PCI Requirement 9.8 – Destroy Media When it is no Longer Needed
PCI Requirement 12.4.1 – Executive Management Shall Establish Responsibility
