Anthropic-Cybersecurity-Skills/skills/implementing-pci-dss-compliance-controls/assets/template.md

Implementing PCI DSS Compliance Controls - Audit Checklist

Organization Information

Field	Value
Organization Name
Assessment Date
Assessor
Standard	PCI DSS v4.0.1

---

Compliance Checklist

1. Requirement 1: Install and maintain network security controls

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

2. Requirement 2: Apply secure configurations to all system components

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

3. Requirement 3: Protect stored account data

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

4. Requirement 4: Protect cardholder data with strong cryptography during transmission

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

5. Requirement 5: Protect all systems and networks from malicious software

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

6. Requirement 6: Develop and maintain secure systems and software

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

7. Requirement 7: Restrict access by business need to know

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

8. Requirement 8: Identify users and authenticate access

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

9. Requirement 9: Restrict physical access to cardholder data

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

10. Requirement 10: Log and monitor all access to system components

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

11. Requirement 11: Test security of systems and networks regularly

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

12. Requirement 12: Support information security with policies and programs

• Policy/procedure documented
• Controls implemented
• Evidence available
• Tested and verified
• Status: Compliant / Partially Compliant / Non-Compliant / N/A
• Evidence: _______________
• Notes: _______________

---

Summary

Status	Count
Compliant
Partially Compliant
Non-Compliant
N/A

Sign-off

Role	Name	Signature	Date
Assessor
Security Manager
Senior Management