Cardholder Data Access Policy

Written By Micah

PCI DSS 7 and 8.7 require access procedures to be in place and documented for the protection of cardholder data. This policy is intended to be a supplement to the Logical Access Policy.

Commonly associated evidence:

  • Cardholder Access Policy

Who needs a policy like this?

  • Businesses that need to conform to PCI requirements.

How to use the template:

  • Click on the link above to access the template

    • If you are a Google Workplace organization, make a copy by going to File > Make a copy

    • If you are not a Google Workplace organization, download a copy by going to File > Download and selecting your preferred file type (available as DOCX, PDF, and more)

  • Review and then remove instructional text

  • Save in a centralized place

  • Attach to evidence either through Integrations, Automated Collection, or direct upload

Questions?

Reach out through our chat feature for real-time Customer Success support 8 am - 5 pm PT Monday through Friday.