PCI DSS Assessment Skill

Perform a PCI DSS v4.0 assessment for {{ merchant_name }} ({{ saq_type }}) covering CDE: {{ cde_scope }}.

Workflow

Step 1 — Scope & CDE Identification

Define the Cardholder Data Environment (CDE):

1. Systems that store, process, or transmit cardholder data: [list]
2. Connected-to systems: Systems with network connectivity to CDE
3. Security-impacting systems: Firewalls, IDS, auth servers affecting CDE
4. Data flow diagram: Map cardholder data from entry to storage/disposal

Step 2 — Requirement 1-2: Network Security