PCI DSS V1.2 for Merchant |
| Findings
Color Code |
| Compliant |
| Not assessed |
| Non-Compliant
|
|
|
PCI DSS 03 .01
|
Question: Do the policies and procedures for data retention and disposal include requirements for a review, conducted at least on a quarterly basis, to verify that stored cardholder data does not exceed business retention requirements ? |
|
Answered by: BOSTON::JEFFERSON
As part of Manual Examination group: POLICY_DATA_RETENTION
|
Answer: Not Asked
|
|
|
This PCI DSS V1.2 report is posted on the Internet to promote Version 3.0 of LJK/Security . The corresponding vulnerability report for your own system should be guarded more carefully, such as by being reviewed only from local HTML disk files rather than via a web server.
|