EXECUTIVESUMMARY 4.3 - CHD DATA STORAGE (003) MS
EXECUTIVESUMMARY 4.3 - CHD DATA STORAGE (003) MS
Executive Summary – 4.3 Cardholder data storage
Please have the below table completed and returned.
4.3 Cardholder data storage
Identify and list all databases, tables, and files storing post-authorization cardholder data and provide the following details.
Note: The list of files and tables that store cardholder data in the table below must be supported by an inventory created (or obtained from the client) and retained by the assessor in the work papers.
Data Store |
File(s) and/or Table(s) |
Cardholder data elements stored |
How data is secured |
How access to data stores is logged |
pt135 |
ATTRIBUTE |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
DISPATCH_INTERACT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
READ_WRITE_ATTRIBUTE |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
PT235 |
ATTRIBUTE |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
DISPATCH_INTERACT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
READ_WRITE_ATTRIBUTE |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
pr101 |
ATTRIBUTE |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
DISPATCH_INTERACT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
INTERACT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
Data Store |
File(s) and/or Table(s) |
Cardholder data elements stored |
How data is secured |
How access to data stores is logged |
PCH01 |
DISPATCH_INTERACT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
PUBLISHED_RESULT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
RECORD |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
RESPONSE_INTERACT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
PCH02 |
DISPATCH_INTERACT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
PUBLISHED_RESULT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
RECORD |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |
|
RESPONSE_INTERACT |
PI, or PII or PCI data |
encrypted |
R and D may be able to speak |