Entity identifies and maintains the list of PCI DSS requirements are managed by each service provider, and which are managed by the entity