Laserfiche WebLink
<br />Part 2g. Summary of Requirements Tested <br />For each PCI DSS Requirement, select one of the following: <br />• <br />• <br />• <br />Full – The requirement and all sub-requirements of that requirement were assessed, and no sub- <br />requirements were marked as “Not Tested” or “Not Applicable” in the ROC. <br />Partial – One or more sub-requirements of that requirement were marked as “Not Tested” or “Not <br />Applicable” in the ROC. <br />None – All sub-requirements of that requirement were marked as “Not Tested” and/or “Not Applicable” <br />in the ROC. <br />For all requirements identified as either “Partial” or “None,” provide details in the “Justification for Approach” <br />column, including: <br />•Details of specific sub-requirements that were marked as either “Not Tested” and/or “Not Applicable” in <br />the ROC <br />•Reason why sub-requirement(s) were not tested or not applicable <br />Note: One table to be completed for each service covered by this AOC. Additional copies of this section are <br />available on the PCI SSC website. <br />Name of Service Assessed:Payment Gateway Service <br />Details of Requirements Assessed <br />Justification for Approach <br />PCI DSS <br />Requirement <br />(Required for all “Partial” and “None” responses. Identify which <br />sub-requirements were not tested and the reason.)Full Partial None <br />Requirement 1:☒☐ <br />☒ <br />☐ <br />☐Requirement 2: <br />Requirement 3: <br />☐2.1.1 – No in-scope wireless <br />2.2.3 – No insecure services, protocols, or daemons <br />2.6 – Not a shared hosting provider <br />☐☒☐3.4.1 – No FDE in use <br />3.6 – No shared keys for transmission of CHD <br />3.6.6 – No manual clear-text key-management <br />Requirement 4: <br />Requirement 5: <br />Requirement 6: <br />Requirement 7: <br />Requirement 8: <br />Requirement 9: <br />☐ <br />☒ <br />☐ <br />☒ <br />☐ <br />☐ <br />☒ <br />☐ <br />☒ <br />☐ <br />☒ <br />☒ <br />☐ <br />☐ <br />☐ <br />☐ <br />☐ <br />☐ <br />4.1.1 – No in-scope wireless <br />6.4.6 – No significant changes <br />8.5.1 – No remote access to customer premises <br />9.5.1 – CHD is never backed up to removable media <br />9.6 – CHD is never backed up to removable media <br />9.6.[2-3] – CHD is never backed up to removable <br />media <br />PCI DSS v3.2.1 Attestation of Compliance for Onsite Assessments – Service Providers, Rev. 1.0 <br />© 2006-2018 PCI Security Standards Council, LLC. All Rights Reserved. <br />June 2018 <br />Page 7