[PCI DSS 1.x] 12.4 Ensure that the security policy and procedures clearly define information security responsibili

12.4 Verify that information security policies clearly define information security responsibilities for both employees and contractors