SAQ T1

Question 1

Administrative Access

Answer 1

Elevated or increased privileges granted to an account in order for that account to manage systems, networks, and/or applications.

Question 2

Authorization

Answer 2

Granting of access or other rights to a user, program, or process.

Question 3

Card Skimmer

Answer 3

A physical device, often attached to a legitimate card-reading device, designed to illegitimately capture and/or store the information from a payment card.

Question 4

Degaussing

Answer 4

Disk degaussing.” Process or technique that demagnetizes the disk such that all data stored on the disk is permanently destroyed.

Question 5

Disk Encryption

Answer 5

Technique or technology (either software or hardware) for encrypting all stored data on a device (for example, a hard disk or flash drive). Alternatively, File-Level Encryption or Column-Level Database Encryption is used to encrypt contents of specific files or columns.

Question 6

Operating System / OS

Answer 6

Software of a computer system that is responsible for the management and coordination of all activities and the sharing of computer resources. Examples of operating systems include Microsoft Windows, Mac OS, Linux and Unix.

Question 7

PED

Answer 7

PIN Entry Device

Question 8

Personnel

Answer 8

Full-time and part-time employees, temporary employees, contractors, and consultants who are “resident” on the entity’s site or otherwise have access to the cardholder data environment.

Question 9

POI

Answer 9

“Point of Interaction”

Question 10

Policy

Answer 10

Organization-wide rules governing acceptable use of computing resources, security practices, and guiding development of operational procedures

Question 11

POS

Answer 11

“point of sale.”

Question 12

Privileged User

Answer 12

Any user account with greater than basic access privileges.

Question 13

QIR

Answer 13

Qualified Integrator or Reseller

Question 14

Removable Electronic Media

Answer 14

Media that store digitized data and which can be easily removed and/or transported from one computer system to another

Question 15

Secure Wipe

Answer 15

“secure delete,” a method of overwriting data residing on a hard disk drive or other digital media, rendering the data irretrievable.

Question 16

Security Officer

Answer 16

Primary responsible person for an entity’s security-related affairs.

Question 17

Security Policy

Answer 17

Set of laws, rules, and practices that regulate how an organization manages, protects, and distributes sensitive information.

Question 18

Sensitive Area

Answer 18

Any data center, server room or any area that houses systems that stores, processes, or transmits cardholder data.

Question 19

Smart Card

Answer 19

“chip card” or “IC card (integrated circuit card)

Question 20

System Components

Answer 20

Any network component, server, or application included in or connected to the cardholder data environment.