[RETIRED] PCI DSS v3.0 Questions and Answers Forum

Topic	Views	Activity
[PCI DSS 3.0] 10.2 Implement automated audit trails for all system components to reconstruct the following events: Regularly Monitor and Test Networks (Requirements requirement-10:-trac	1399	September 23, 2014
[PCI DSS 3.0] 10.1 Implement audit trails to link all access to system components to each individual user. Regularly Monitor and Test Networks (Requirements requirement-10:-trac	1875	September 23, 2014
[PCI DSS 3.0] 9.10 Ensure that security policies and operational procedures for restricting physical access to car Implement Strong Access Control Measures (Requirem requirement-9:-restr	2427	September 23, 2014
[PCI DSS 3.0] 9.9.3 Provide training for personnel to be aware of attempted tampering or replacement of devices. T Implement Strong Access Control Measures (Requirem requirement-9:-restr	2584	September 23, 2014
[PCI DSS 3.0] 9.9.2 Periodically inspect device surfaces to detect tampering (for example, addition of card skimme Implement Strong Access Control Measures (Requirem requirement-9:-restr	2493	September 23, 2014
[PCI DSS 3.0] 9.9.1 Maintain an up-to-date list of devices. The list should include the following: Implement Strong Access Control Measures (Requirem requirement-9:-restr	2050	September 23, 2014
[PCI DSS 3.0] 9.9 Protect devices that capture payment card data via direct physical interaction with the card fro Implement Strong Access Control Measures (Requirem requirement-9:-restr	2062	September 23, 2014
[PCI DSS 3.0] 9.8.2 Render cardholder data on electronic media unrecoverable so that cardholder data cannot be rec Implement Strong Access Control Measures (Requirem requirement-9:-restr	2266	September 23, 2014
[PCI DSS 3.0] 9.8.1 Shred, incinerate, or pulp hard- copy materials so that cardholder data cannot be reconstructe Implement Strong Access Control Measures (Requirem requirement-9:-restr	2497	September 23, 2014
[PCI DSS 3.0] 9.8 Destroy media when it is no longer needed for business or legal reasons as follows: Implement Strong Access Control Measures (Requirem requirement-9:-restr	1962	September 23, 2014
[PCI DSS 3.0] 9.7.1 Properly maintain inventory logs of all media and conduct media inventories at least annually. Implement Strong Access Control Measures (Requirem requirement-9:-restr	2917	September 23, 2014
[PCI DSS 3.0] 9.7 Maintain strict control over the storage and accessibility of media. Implement Strong Access Control Measures (Requirem requirement-9:-restr	1865	September 23, 2014
[PCI DSS 3.0] 9.6.3 Ensure management approves any and all media that is moved from a secured area (including when Implement Strong Access Control Measures (Requirem requirement-9:-restr	1833	September 23, 2014
[PCI DSS 3.0] 9.6.2 Send the media by secured courier or other delivery method that can be accurately tracked. Implement Strong Access Control Measures (Requirem requirement-9:-restr	2304	September 23, 2014
[PCI DSS 3.0] 9.6.1 Classify media so the sensitivity of the data can be determined. Implement Strong Access Control Measures (Requirem requirement-9:-restr	3204	September 23, 2014
[PCI DSS 3.0] 9.6 Maintain strict control over the internal or external distribution of any kind of media, includi Implement Strong Access Control Measures (Requirem requirement-9:-restr	2242	September 23, 2014
[PCI DSS 3.0] 9.5.1 Store media backups in a secure location, preferably an off-site facility, such as an alternat Implement Strong Access Control Measures (Requirem requirement-9:-restr	2366	September 23, 2014
[PCI DSS 3.0] 9.5 Physically secure all media. Implement Strong Access Control Measures (Requirem requirement-9:-restr	2636	September 23, 2014
[PCI DSS 3.0] 9.4.4 A visitor log is used to maintain a physical audit trail of visitor activity to the facility a Implement Strong Access Control Measures (Requirem requirement-9:-restr	2758	September 23, 2014
[PCI DSS 3.0] 9.4.3 Visitors are asked to surrender the badge or identification before leaving the facility or at Implement Strong Access Control Measures (Requirem requirement-9:-restr	1701	September 23, 2014
[PCI DSS 3.0] 9.4.2 Visitors are identified and given a badge or other identification that expires and that visibl Implement Strong Access Control Measures (Requirem requirement-9:-restr	1896	September 23, 2014
[PCI DSS 3.0] 9.4.1 Visitors are authorized before entering, and escorted at all times within, areas where cardhol Implement Strong Access Control Measures (Requirem requirement-9:-restr	2067	September 23, 2014
[PCI DSS 3.0] 9.4 Implement procedures to identify and authorize visitors. Implement Strong Access Control Measures (Requirem requirement-9:-restr	1749	September 23, 2014
[PCI DSS 3.0] 9.3 Control physical access for onsite personnel to the sensitive areas as follows: Implement Strong Access Control Measures (Requirem requirement-9:-restr	2326	September 23, 2014
[PCI DSS 3.0] 9.2 Develop procedures to easily distinguish between onsite personnel and visitors, to include: Implement Strong Access Control Measures (Requirem requirement-9:-restr	2451	September 23, 2014
[PCI DSS 3.0] 9.1.3 Restrict physical access to wireless access points, gateways, handheld devices, networking/com Implement Strong Access Control Measures (Requirem requirement-9:-restr	1913	September 23, 2014
[PCI DSS 3.0] 9.1.2 Implement physical and/or logical controls to restrict access to publicly accessible network j Implement Strong Access Control Measures (Requirem requirement-9:-restr	2352	September 23, 2014
[PCI DSS 3.0] 9.1.1 Use video cameras and/or access control mechanisms to monitor individual physical access to se Implement Strong Access Control Measures (Requirem requirement-9:-restr	4172	September 23, 2014
[PCI DSS 3.0] 9.1 Use appropriate facility entry controls to limit and monitor physical access to systems in the c Implement Strong Access Control Measures (Requirem requirement-9:-restr	2079	September 23, 2014
[PCI DSS 3.0] 8.8 Ensure that security policies and operational procedures for identification and authentication a Implement Strong Access Control Measures (Requirem requirement-8:-ident	2221	September 23, 2014