2.8 Preparing for the Assessment of an Issuer (was: Preparing for a PCI’s Assessment)
All changes in this version
Title changed
Before · SP 800-79-1
Preparing for a PCI’s Assessment
After · SP 800-79-2
Preparing for a PCI’sthe Assessment of an Issuer
Control changed
Before · SP 800-79-1
To facilitate an assessment of a PCI in a timely, efficient, and thorough manner, it is essential that all members of the Assessment team and staff of the PCI understand their specific roles and responsibilities, and participate as needed. The PCI, its facility personnel, and the team responsible for performing the assessment must cooperate and collaborate in a joint manner to ensure the success of the assessment. Specific responsibilities of the assessment team are listed below. For further information, including considerations that an organization may want to take into account when outsourcing assessments, refer to NIST Interagency Report (IR) 7328, Security Assessment Provider Requirements and Customer Responsibilities: Building a Security Assessment Credentialing Program for Federal Information Systems.
After · SP 800-79-2
To facilitate an assessment of aan PCIissuer in a timely, efficient, and thorough manner, it is essential that allthe membersstaff of the Assessment teamissuer and staffmembers of the PCIAssessment team understand their specific roles and responsibilities, and participate as needed. The PCIissuer, its facility personnel, and the team responsible for performing the assessment must cooperate and collaborate in a joint manner to ensure the success of the assessment. Specific responsibilities of the assessment team are listed below. For further information, including considerations that an organization may want to take into account when outsourcing assessments, refer to NIST Interagency Report (IR) 7328, Security Assessment Provider Requirements and Customer Responsibilities: Building a Security Assessment Credentialing Program for Federal Information Systems.