[PCI DSS 3.0] 12.8.1 Maintain a list of service providers.

[READ-ONLY] Archives [RETIRED] PCI DSS v3.0 Questions and Answers Forum Maintain an Information Security Policy (Requireme
1

12.8.1 Maintain a list of service providers.

12.8.1 Verify that a list of service providers is maintained.

Keeping track of all service providers identifies where potential risk extends to outside of the organization.