IT591 Unit 3 - Apply auditing processes within a technical

IT591 Unit 3

IT591-3: Apply auditing processes within a technical scenario.

Purpose 

This assignment helps you learn how to prepare for a specific audit, in this case, the PCI-DSS audit. You will use the PCI-DSS Self-Assessment Questionnaire D for Merchants (Version 4.0 (Available in your readings) and become familiar with the various sections that the audit will cover, and what preparation must occur to ensure compliance within each section.

Assignment Instructions 

Use the link to the PCI-DSS self-assessment questionnaire (SQA-D) for Vendors (V. 4.0) provided in this week’s readings and use this information to complete the assignment.

Consider the PCI-DSS self-assessment questionnaire D for Merchants (V. 4.0) which a typical retail merchant would have to show compliance in order to continue doing business with credit cards.

1. Review the questions associated with four different requirements of the twelve covered by the assessment questions (specifically sections 3, 8, 9, and one other section of your choice)
2. For each section explain:

• The purpose of that section, why it is important, and what these questions seek to achieve.
• Pick any three questions in that section and explain:
  • What the question means
  • What evidence would be needed to show compliance
  • Whether it would be easy or difficult to achieve compliance and why
• Do not pick three that are all easy
• Summarize your impressions of the questions for this section and discuss how a merchant would establish or maintain compliance.

1. For any question that you examined in item 2 above, (which was deemed hard to comply with) assume that you cannot fully meet the requirement and draft up a half-page compensating control (Refer to Appendix B) that would substitute for a fully compliant response.
2. Write a 1-paragraph summary about what you learned from this exercise.

Assignment Requirements

• 5–6 pages of content (exclusive of the cover sheet and references page), using Times New Roman font style, 12 point, double-spaced, using correct APA formatting, and include a cover sheet, table of contents, abstract, and reference page(s).
• At least 1 credible source cited and referenced
• No more than 1 table or figure
• No spelling errors
• No grammar errors
• No APA errors