Item 23 - City-wide Cashiering Software and Hardware Upgrades

Home Browse Search

Part 4. Action Plan for Non-Compliant Requirements Select the appropriate response for “Compliant to PCI DSS Requirements” for each requirement. If you answer “No” to any of the requirements, you may be required to provide the date your Company expects to be compliant with the requirement and a brief description of the actions being taken to meet the requirement. Check with the applicable payment brand(s) before completing Part 4. Compliant to PCI DSS Requirements Remediation Date and Actions (If “NO” selected for any Requirement) PCI DSS Requirement Description of Requirement (Select One) YES NO Install and maintain a firewall configuration to protect cardholder data ☒☐1 2 Do not use vendor-supplied defaults for system passwords and other security parameters ☒☐ ☒ ☒ ☒ ☐ ☐ ☐ 3 4 Protect stored cardholder data Encrypt transmission of cardholder data across open, public networks Protect all systems against malware and regularly update anti-virus software or programs 5 Develop and maintain secure systems and applications ☒ ☒ ☒ ☒ ☒ ☒ ☒ ☒ ☒ ☐ ☐ ☐ ☐ ☐ ☐ ☐ ☐ ☐ 6 Restrict access to cardholder data by business need to know7 Identify and authenticate access to system components8 Restrict physical access to cardholder data9 Track and monitor all access to network resources and cardholder data10 Regularly test security systems and processes11 12 Maintain a policy that addresses information security for all personnel Additional PCI DSS Requirements for Shared Hosting ProvidersAppendix A1 Additional PCI DSS Requirements for Entities using SSL/early TLS for Card- Present POS POI Terminal Connections Appendix A2 PCI DSS v3.2.1 Attestation of Compliance for Onsite Assessments – Service Providers, Rev. 1.0 © 2006-2018 PCI Security Standards Council, LLC. All Rights Reserved. June 2018 Page 12