I’m hoping to clarify this:

If there is a segmented network and card data is only in one section, do the Section 6 requirements for development apply to the network segment that allows card data? Do any other requirements apply to the non-Card Data Environment?

I’m looking for what they look for in audit and not asking about best practices.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.