My WebLink
|
Help
|
About
|
Sign Out
Home
Browse
Search
Item 23 - City-wide Cashiering Software and Hardware Upgrades
Clerk
>
Agenda Packets / Staff Reports
>
City Council (2004 - Present)
>
2023
>
02/07/2023 Regular & HA
>
Item 23 - City-wide Cashiering Software and Hardware Upgrades
Metadata
Thumbnails
Annotations
Entry Properties
Last modified
8/11/2023 10:02:05 AM
Creation date
8/11/2023 10:01:43 AM
Metadata
Fields
Template:
City Clerk
Doc Type
Agenda Packet
Agency
Clerk of the Council
Item #
23
Date
2/7/2023
There are no annotations on this page.
Document management portal powered by Laserfiche WebLink 9 © 1998-2015
Laserfiche.
All rights reserved.
/
90
PDF
Print
Pages to print
Enter page numbers and/or page ranges separated by commas. For example, 1,3,5-12.
After downloading, print the document using a PDF reader (e.g. Adobe Reader).
View images
View plain text
<br />Part 3a. Acknowledgement of Status (continued) <br />No evidence of full track data1, CAV2, CVC2, CID, or CVV2 data2, or PIN data3 storage after <br />transaction authorization was found on ANY system reviewed during this assessment. <br />☒ <br />☒ASV scans are being completed by the PCI SSC Approved Scanning Vendor Tenable Network <br />Security <br />Part 3b. Service Provider Attestation <br />Signature of Service Provider Executive Officer Date: 29 Jun 2021 <br />Service Provider Executive Officer Name: Brent Johnson Title: CISO <br />Part 3c. Qualified Security Assessor (QSA) Acknowledgement (if applicable) <br />If a QSA was involved or assisted with this <br />assessment, describe the role performed: <br />Performed PCI DSS assessment, performed review of evidence, <br />performed scope validation, completed Report On Compliance <br />and Attestation Of Compliance. <br />Signature of Duly Authorized Officer of QSA Company <br />Duly Authorized Officer Name: Shawn Shifflett <br />Date: 29 Jun 2021 <br />QSA Company: Foregenix Ltd <br />Part 3d. Internal Security Assessor (ISA) Involvement (if applicable) <br />If an ISA(s) was involved or assisted with <br />this assessment, identify the ISA personnel <br />and describe the role performed: <br />Not applicable. <br />1 Data encoded in the magnetic stripe or equivalent data on a chip used for authorization during a card-present transaction. Entities <br />may not retain full track data after transaction authorization. The only elements of track data that may be retained are primary <br />account number (PAN), expiration date, and cardholder name. <br />2 <br />3 <br />The three- or four-digit value printed by the signature panel or on the face of a payment card used to verify card-not-present <br />transactions. <br />Personal identification number entered by cardholder during a card-present transaction, and/or encrypted PIN block present <br />within the transaction message. <br />PCI DSS v3.2.1 Attestation of Compliance for Onsite Assessments – Service Providers, Rev. 1.0 <br />© 2006-2018 PCI Security Standards Council, LLC. All Rights Reserved. <br />June 2018 <br />Page 11
The URL can be used to link to this page
Your browser does not support the video tag.