Entity has a documented Password Policy and makes it available to all staff members on the company employee portal
profile_icon
| Aug 30, 2023
Entity ensures all sessions accessing the in-scope environment are configured to timeout within 15 minutes of inactivity
profile_icon
| Aug 30, 2023
Entity identifies vulnerabilities in the network through regular network scanning exercises conducted by an Approved Scanning Vendors
profile_icon
| Aug 30, 2023
Entity ensures that card holder data is not used in testing or development environments
profile_icon
| Aug 30, 2023
Entity identifies vulnerabilities in the network components like servers that are used to host the in-scope application through the execution of regular vulnerability scans
profile_icon
| Aug 30, 2023
Entity ensures all staff members receive training to understand their responsibilities regarding processing of sensitive cardholder information
profile_icon
| Aug 30, 2023