Comment by pm90 | Hacker News Reader

Top New Best Ask Show Jobs

Comment by pm90 | Hacker News Reader

Parent Full thread

This sounds like the worst version of SOC controls.

It's all for "PCI Compliance" lol

How is it for PCI compliance? Which of the PCI DSS requirements outlines this?

Got me, first time I've ever had to fill out something like this

Section 6.5: "Changes to all system components are managed securely."

6.5.1 is probably where the CRF form came from.

There’s a lot you can do with ‘separation of responsibilities’.

Reply on news.ycombinator.com