Entity has provided information to customers on how to report failures, incidents, concerns, or other complaints related to the services or systems provided by the Entity in the event there are problems.
Entity appoints an owner of Infrastructure operations, who is responsible for all assets in the inventory
Entity has provided information to employees, via the Information Security Policy, on how to report failures, incidents, concerns, or other complaints related to the services or systems provided by the Entity in the event there are problems.
Entity identifies and maintains the list of PCI DSS requirements are managed by each service provider, and which are managed by the entity
Entity defines a charter for a PCI DSS compliance program and communication to executive management
Entity ensures that audit logs contain all relevant security log information that helps trace and investigate incidents