A company that ________ is considered to be a service provider.

Requirement 3.5 requires document and implement procedures to protect keys used to secure stored cardholder data against disclose and misuse. This requirement applies to keys used to encrypt stored cardholder data, and also applies to key-encrypting keys used to protect data-encrypting keys. Such key-encrypting keys must be

The Information Supplements: (Select ALL that apply)

Who can perform quarterly external vulnerability scans meeting requirement 11.2.2?

Merchants with segmented payment application systems connected to the Internet, no electronic cardholder data storage, may be eligible to use what SAQ?