A.Verbal warning, suspension, monthly fines

B.Verbal warning, one-off fine, revocation

C.Written warning, suspension, revocation

D.Written warning, remediation, monthly fines

A.Compensating Controls Worksheet

B.Compensating Controls

C.Additional PCI DSS Requirements for Shared Hosting Providers

D.Segmentation and Sampling of Business Facilities/System Components

A.Merchants with data center environments

B.Issuing banks and acquirers

C.Any third party that stores, processes, or transmits cardholder data on behalf of another entity

D.Shared hosting providers

A.Card-not-present Merchants, All Cardholder Data Functions Fully Outsourced

B.Merchants with Only Imprint Machines or Only Standalone, Dial-out Terminals- No Electronic
Cardholder Data Storage Merchants with Only Imprint Machines or Only Standalone, Dial-out Terminals
No Electronic Cardholder Data Storage Merchants with Only Imprint Machines or Only Standalone,
Dial-out Terminals- No Electronic Cardholder Data Storage Merchants with Only Imprint Machines or
Only Standalone, Dial-out Terminals- No Electronic Cardholder Data Storage Merchants with Only
Imprint Machines or Only Standalone, Dial-Out Terminals - No Electronic Cardholder Data Storage

C.Merchants with Payment Application Systems Connected to the Internet-No Electronic Cardholder
Data Storage Merchants with Payment Application Systems Connected to the Internet- No Electronic
Cardholder Data Storage Merchants with Payment Application Systems Connected to the Internet-No
Electronic Cardholder Data Storage Merchants with Payment Application Systems Connected to the
Internet-No Electronic Cardholder Data Storage Merchants with Payment Application Systems
Connected to the Internet - No Electronic Cardholder Data Storage

D.Merchants with Web-Based Virtual Payment Terminals-No Electronic Cardholder Data Storage

A.it's hashed by the merchant storing it

B.it's encrypted by the merchant storing it

C.it's been stored by issuers

D.it's reported to the PCI SSC annually in a RoC