PCI DSS v4.0

    Entity’s infrastructure is configured to review and analyse audit events for anomalous or suspicious activity and threats
    Entity’s data backups are restored and tested annually
    Entity requires that new staff members review and acknowledge relevant company policies, including the code of business conduct, as part of their onboarding. This ensures they understand their responsibilities and are willing to comply with them
    Entity backs-up their production databases periodically
    Entity has a documented Data Backup Policy, and makes it available for all staff on the company employee portal
    Entity tracks all vulnerabilities, and remediates them as per the Vulnerability Management Policy