PCI DSS v4.0

Entity’s Information Security Officer periodically reviews the in-scope environment to ensure card holder data is stored in accordance with PCI Charter document

Entity periodically reviews network infrastructure rule sets, open ports and protocols in accordance with identified security requirements and business justifications

Entity maintains a network diagram that identifies all connections between the environment housing the in-scope data and other networks

Entity uses a change management system to track, review and log all changes to the network configuration and settings

Entity has a documented Network Security Policy and makes it available to all staff members on the company employee portal