9.10.2 Purge, degauss, shred, or otherwise destroy electronic media so that cardholder data cannot be reconstructed - PCI DSS FAQ - Payment Card Industry (PCI) Data Security Standard Discussion Forum

		PCI DSS FAQ - Payment Card Industry (PCI) Data Security Standard Discussion Forum > Payment Card Industry Data Security Standard Frequently Asked Questions (PCI DSS FAQ) > Implement Strong Access Control Measures > [PCI-DSS] Requirement 9: Restrict physical access to cardholder data
9.10.2 Purge, degauss, shred, or otherwise destroy electronic media so that cardholder data cannot be reconstructed

[PCI-DSS] Requirement 9: Restrict physical access to cardholder data Any physical access to data or systems that house cardholder data provides the opportunity for individuals to access devices or data and to remove systems or hardcopies, and should be appropriately restricted.

Thread Tools

Search this Thread

Display Modes

03-18-2007, 03:24 AM

admin

Administrator

Join Date: Jul 2002

Posts: 229

9.10.2 Purge, degauss, shred, or otherwise destroy electronic media so that cardholder data cannot be reconstructed

9.10.2 Verify that electronic media is destroyed beyond recovery by using a military wipe program to delete files, or via degaussing or otherwise physically destroying the media

Bookmarks

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
12.3.10 When accessing cardholder data remotely via modem, prohibition of storage of cardholder data onto local hard drives, floppy disks, or other external media. Prohibition of cut-and-paste and print functions during remote access	admin	[PCI-DSS] Requirement 12: Maintain a policy that addresses information security	1	09-30-2009 06:19 AM
9.10 Destroy media containing cardholder data when it is no longer needed for business or legal reasons as follows	admin	[PCI-DSS] Requirement 9: Restrict physical access to cardholder data	0	03-18-2007 03:24 AM
9.9 Maintain strict control over the storage and accessibility of media that contains cardholder data.	admin	[PCI-DSS] Requirement 9: Restrict physical access to cardholder data	0	03-18-2007 03:23 AM
9.7 Maintain strict control over the internal or external distribution of any kind of media that contains cardholder data: including the following	admin	[PCI-DSS] Requirement 9: Restrict physical access to cardholder data	0	03-18-2007 03:22 AM
9.6 Physically secure all paper and electronic media (including computers, electronic media, networking and communications hardware, telecommunication lines, paper receipts, paper reports, and faxes) that contain cardholder data	admin	[PCI-DSS] Requirement 9: Restrict physical access to cardholder data	0	03-18-2007 03:21 AM

All times are GMT -4. The time now is 07:52 AM.