· Michael Avdeev · Insights
PCI DSS 12.5.2: Why Your Scope Confirmation Isn't Evidence
PCI DSS 12.5.2 requires you to find account data outside your CDE. Its testing procedure only needs documents and interviews. That gap is where breaches live.
PCI DSS 12.5.2 requires you to find account data outside your CDE. Its testing procedure only needs documents and interviews. That gap is where breaches live.