PCI DSS v4.0

Entity’s infrastructure is configured to review and analyse audit events for anomalous or suspicious activity and threats

Entity’s data backups are restored and tested annually

Entity requires that new staff members review and acknowledge relevant company policies, including the code of business conduct, as part of their onboarding. This ensures they understand their responsibilities and are willing to comply with them

Entity backs-up their production databases periodically

Entity has a documented Data Backup Policy, and makes it available for all staff on the company employee portal

Entity tracks all vulnerabilities, and remediates them as per the Vulnerability Management Policy