PCI DSS Compliance

[Babar_Qayyum]

Dear All,

I am looking for the answers of the below questions to be the part of the PCI DSS project.

• Does the system receive
  full card numbers (Y/N)?
• Does the system send full
  card numbers (Y/N)?
• Does the system store full
  card numbers (Y/N)?
• Does the system display full
  card numbers (Y/N)?
• Does the system process full
  card numbers (Y/N)?

Regards,

Babar

[pahofmann]

is it about credit card numbers? In any way, it depends on configuration.

Per default most likely not.

But a user could create a request attribute to capture the number or if the card number is contained in a log, it might be captured if log analytics premium is used.

Another posibility is RUM, where the number may be captured as part of a user action name.

[Babar_Qayyum]

Hello @Patrick H.

Exactly. I am asking about the credit card numbers and looking for the generic information in the form of Yes or No to provide the information to the requested persons.

Regards,

Babar