Conducting_a_PCI_DSS_Compliance_Review_3e_-_Adebusola_Adewole
pdf
keyboard_arrow_up
School
University of Louisiana, Lafayette *
*We aren’t endorsed by this school
Course
590
Subject
Information Systems
Date
Dec 6, 2023
Type
Pages
7
Uploaded by MinisterJellyfishPerson3719
Conducting a PCI DSS Compliance Review (3e)
Managing Risk in Information Systems, Third Edition - Lab 02
Student:
Email:
Adebusola Adewole
adebusola.adewole1@louisiana.edu
Time on Task:
Progress:
6 hours, 41 minutes
100%
Report Generated:
Friday, September 23, 2022 at 2:03 PM
Guided Exercises
Part 1: Create User Roles and Accounts
21.
Make a screen capture
showing the
two new user accounts in SimpleRisk
.
Part 2: Identify Instances of Noncompliance
Page 1 of 7
Conducting a PCI DSS Compliance Review (3e)
Managing Risk in Information Systems, Third Edition - Lab 02
11.
Make a screen capture
showing the
first risk entry on the Pending Risks page.
12.
Make a screen capture
showing the
second risk entry on the Pending Risks page
.
Page 2 of 7
Conducting a PCI DSS Compliance Review (3e)
Managing Risk in Information Systems, Third Edition - Lab 02
13.
Make a screen capture
showing the
third risk entry on the Pending Risks page
.
32.
Make a screen capture
showing the
empty Pending Risks page
.
Page 3 of 7
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
Conducting a PCI DSS Compliance Review (3e)
Managing Risk in Information Systems, Third Edition - Lab 02
Part 3: Review Risks and Set Mitigation Actions
7.
Make a screen capture
showing the
inherent and residual risk levels
.
Page 4 of 7
Conducting a PCI DSS Compliance Review (3e)
Managing Risk in Information Systems, Third Edition - Lab 02
11.
Make a screen capture
showing the
completed Review tab for Risk 1002
.
Page 5 of 7
Conducting a PCI DSS Compliance Review (3e)
Managing Risk in Information Systems, Third Edition - Lab 02
Challenge Exercise
Make a screen capture
showing the
completed Mitigation tab for Risk 1001
.
Page 6 of 7
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help
Conducting a PCI DSS Compliance Review (3e)
Managing Risk in Information Systems, Third Edition - Lab 02
Make a screen capture
showing the
completed Mitigation tab for Risk 1003
.
Provide examples
of your recommended mitigation actions.
6.4.4 1. Assign members of the IT department to observe testing processes and review and verify that
test data and accounts are removed. 2. Check that all systems that have been recently installed or
updated to make sure all test data and accounts are removed before being made active 12.54 1.
Ensure that an individual or team from the IT department is formally assigned the responsibility of
active administration of user accounts. 2. A policy should be put in place to ensure that the individual
or team is aware of their responsibilities and task and also for accountability
Powered by TCPDF (www.tcpdf.org)
Page 7 of 7