WI0012-02: PCI Compliance Policy and Standards Flashcards
1
Q
WI0012-02: PCI Compliance Policy and Standards
What entries are made in Eramba, our GRC software?
A
Any integrations from software in the LabLynx cloud to payment solutions will be tracked as assets in Eramba, in order to effectively manage compliance risk.
2
Q
WI0012-02: PCI Compliance Policy and Standards
When is traffic that contains sensitive details allowed inside the perimeter of the LabLynx network?
A
Never. The browser should link to, or enable a compliant third party service to process PCI information, purely on the client side.
