Requirement #12
60.33% Calculated Score
Latest Evidence
| Name | Result | Last Seen | Weighting | Tags | |
|---|---|---|---|---|---|
|
12.1 Establish, publish, maintain, and disseminate a security policy.
|
PCI DSS 3.2.1 - Req… |
0.99009901/0/false/false Control Degraded (NotOK) 0.99% |
15/10/2025, 11:14:37 last observed |
9% | 9 |
|
12.2 Implement a risk-assessment process that:
• Is performed at least annually and upon significant changes to the environment (for example, acquisition, merger, relocation, etc.),
• Identifies critical assets, threats, and vulnerabilities, and
• Results in a formal, documented analysis of risk.
Examples of risk-assessment methodologies include but are not limited to OCTAVE, ISO 27005 and NIST SP 800-30.
|
PCI DSS 3.2.1 - Req… |
0.99009901/0/false/false Control Degraded (NotOK) 0.99% |
15/10/2025, 11:14:37 last observed |
9% | 9 |
|
12.3 Develop usage policies for critical technologies and define proper use of these technologies.
Note: Examples of critical technologies include, but are not limited to, remote access and wireless technologies, laptops, tablets, removable electronic media, e-mail usage and Internet usage.
Ensure these usage policies require the following:
|
PCI DSS 3.2.1 - Req… |
30.69306931/0/false/false Control Degraded (NotOK) 30.69% |
15/10/2025, 11:14:37 last observed |
9% | 9 |
|
12.4 Ensure that the security policy and procedures clearly define information security responsibilities for all personnel.
|
PCI DSS 3.2.1 - Req… |
100/100/false/false Control Degraded (NotOK) 100% |
15/10/2025, 11:14:37 last observed |
9% | 9 |
Description
Requirement 12: Maintain a policy that addresses information security for all personnel
Metadata
| Last Seen: | 2025-10-15 11:14:37 |
|---|---|
| Control Owner: | Owain Rowley (owain.rowley@quodorbis.com) |
| Control Approver: | Jason Wilkes (jason.wilkes@quodorbis.com) |
Links
Relationships
Tags
Entity Scope
SystemXXX
SystemXXX
SystemXXX
SystemXXX
SystemXXX
SystemXXX
Description
Calculations
Metadata
| Last Seen | |
|---|---|
| Control Type | |
| Control Owner | |
| Control Approver | |
| Target State | |
| Baseline State | |
| Monitored |
Events (Past 7 Days)
Relationships
Evidence Picker
Evidence
Manual Attestation
Risk Score
Org Chart
Metadata
Tags
Timeline
Discovered By
| Data Source | Last Seen By Data Source | State | Trend |
|---|
Evidence
PCI DSS 4.0
PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards designed to protect cardholder data. It aims to ensure that all companies handling credit card information maintain a secure environment. The standard covers key areas including:
PCI Radar
Requirement #1
76%Requirement #2
94%Requirement #3
98%Requirement #4
71%Requirement #5
63%Requirement #6
74%Requirement #7
92%Requirement #8
78%Requirement #9
82%Requirement #10
89%Requirement #11
95%Requirement #12
60%PCI Key Controls
PCIKeyCTRL
PCI Remaining Controls
PCIRekCTRL
PCI DSS 4.0 Overview
PCI DSS 3.2.1
Requirement #1
Req 1.1
Req 1.1.1
Demo Metric 6
Req 1.1.1.a
Demo Metric 61
PolProReview
Req 1.1.1.b
FWChgAppr
FWChgMetReq
FWChgTestState
Req 1.1.2
Demo Metric 56
Req 1.1.2.a
CrdHldrFlowAppr
Demo Metric 56
Req 1.1.3
Cardholder Data
Demo Metric 58
Req 1.1.4
Demo Metric 60
PrdSlackPubFile
Req 1.1.5
Demo Metric 5
Demo Metric 61
Req 1.1.6
Demo Metric 58
UATO365UsrMFA
Req 1.1.7
Demo Metric 5
Demo Metric 6
Req 1.2
Req 1.2.1
AzPrd-SS-Enable
Demo Metric 58
Req 1.2.2
Demo Metric 4
Demo Metric 59
Req 1.2.3
Demo Metric 4
Demo Metric 62
Req 1.3
Req 1.3.1
Demo Metric 3
Demo Metric 55
Req 1.3.2
Demo Metric 5
Demo Metric 60
Req 1.3.3
Demo Metric 6
Req 1.3.4
Demo Metric 5
Demo Metric 62
Req 1.3.5
Demo Metric 62
PrdSlackPubFile
Req 1.3.6
Demo Metric 1
Demo Metric 14
Demo Metric 61
Req 1.3.7
AzPrd-SS-Enable
Demo Metric 62
Req 1.4
Req 1.4.0
Demo Metric 1
Demo Metric 62
Req 1.5
Req 1.5.0
Demo Metric 58
UATO365UsrMFA
Requirement #2
Req 2.1
Req 2.1.1
Demo Metric 5
Demo Metric 6
Demo Metric 63
Req 2.2
Req 2.2.1
Demo Metric 6
SecConfStdAppr
Req 2.2.2
Demo Metric 60
SecConfStdAppr
Req 2.2.3
Demo Metric 59
SecConfStdAppr
Req 2.2.4
Demo Metric 58
SecConfStdAppr
Req 2.2.5
SecConfStdAppr
Req 2.3
Req2.3.0
AzPrd-SS-Enable
Demo Metric 56
Req 2.4
Req 2.4.0
Demo Metric 56
PCICMDB
Req 2.5
Req 2.5.0
Demo Metric 5
Demo Metric 62
Demo Metric 63
Req 2.6
Req 2.6.0
Demo Metric 5
Demo Metric 58
Demo Metric 63
Requirement #3
Req 3.1
Req 3.1.0
DataRetPolAppr
Demo Metric 59
Req 3.2
Req 3.2.1
Demo Metric 5
Demo Metric 56
Req 3.2.2
Demo Metric 4
Demo Metric 61
Req 3.2.3
Demo Metric 4
Demo Metric 55
Req 3.3
Req 3.3.0
Demo Metric 1
Demo Metric 61
Req 3.4
Req 3.4.1
Demo Metric 5
Demo Metric 58
Req 3.5
Req 3.5.1
Demo Metric 5
Demo Metric 58
Req 3.5.2
Demo Metric 2
Req 3.5.3
Demo Metric 4
Demo Metric 6
Req 3.5.4
Demo Metric 62
PrdSlackPubFile
Req 3.6
Req 3.6.0
Demo Metric 57
Req 3.6.1
Demo Metric 55
PrdSlackPubFile
Req 3.6.2
Demo Metric 4
Demo Metric 60
Req 3.6.3
Demo Metric 2
Req 3.6.4
Demo Metric 55
KeyRot
Req 3.6.5
Demo Metric 59
KeyRot
Req 3.6.6
Demo Metric 55
UATO365UsrMFA
Req 3.6.7
Demo Metric 3
Demo Metric 61
Req 3.6.8
Demo Metric 55
UATO365UsrMFA
Req 3.7
Req 3.7.0
Demo Metric 59
PrdSlackPubFile
Requirement #4
Req 4.1
Req 4.1.1
Demo Metric 55
PrdSlackPubFile
Req 4.1.b
Demo Metric 58
EncStrngthAppr
SecPrtclAppr
TrstdKeyAppr
Req 4.1.c
CrdPrtlSSLScr
Demo Metric 57
Req 4.1.g
CrdPrtlSSLScr
Demo Metric 58
Req 4.2
Req 4.2.0
Demo Metric 3
Demo Metric 60
Req 4.3
Req 4.3.0
Demo Metric 3
Demo Metric 59
Requirement #5
Req 5.1
Req 5.1.0
ATPInstalled
Demo Metric 58
Req 5.1.1
ATPInstalled
Demo Metric 61
Req 5.1.2
Demo Metric 5
Demo Metric 62
Demo Metric 63
Req 5.2
Req 5.2.0
ATPUpToDate
Demo Metric 56
Req 5.3
Req 5.3.0
ATPInstalled
Demo Metric 6
Req 5.4
Req 5.4.0
Demo Metric 58
UATO365UsrMFA
Requirement #6
Req 6.1
Req 6.1.0
Demo Metric 57
VulnMgmtAppr
Req 6.2
Req 6.2.0
MissPatch
Req 6.3
Req 6.3.1
Demo Metric 61
PrdSlackPubFile
Req 6.3.2
AzPrd-SS-Enable
Demo Metric 57
Req 6.4
Req 6.4.1
Demo Metric 4
Demo Metric 60
Req 6.4.2
Demo Metric 3
Demo Metric 56
Req 6.4.3
Demo Metric 3
Demo Metric 61
Req 6.4.4
Demo Metric 3
Demo Metric 58
Req 6.4.5
Demo Metric 3
Demo Metric 57
Req 6.4.6
Demo Metric 2
Req 6.5
Req 6.5.1
Demo Metric 5
Demo Metric 56
Req 6.5.2
Demo Metric 58
PrdSlackPubFile
Req 6.5.3
Demo Metric 2
Demo Metric 62
Req 6.5.4
Demo Metric 3
Demo Metric 58
Req 6.5.5
AzPrd-SS-Enable
Demo Metric 61
Req 6.5.6
Demo Metric 62
UATO365UsrMFA
Req 6.5.7
Demo Metric 5
Demo Metric 55
Demo Metric 63
Req 6.5.8
Demo Metric 14
Demo Metric 60
Req 6.5.9
Demo Metric 3
Demo Metric 59
Req 6.5.10
Demo Metric 55
Req 6.6
Req 6.6.0
Demo Metric 58
WASVulnScan
Req 6.7
Req 6.7.0
Demo Metric 4
Demo Metric 60
Requirement #7
Req 7.1
Req 7.1.1
Demo Metric 56
RlsPrivAppr
Req 7.1.2
Demo Metric 62
PrdSlackPubFile
Req 7.1.3
Demo Metric 5
Demo Metric 61
Req 7.1.4
Demo Metric 5
Demo Metric 59
Req 7.2
Req 7.2.1
Demo Metric 2
Req 7.2.2
Demo Metric 2
Req 7.2.3
Demo Metric 5
Demo Metric 57
Demo Metric 63
Req 7.3
Req 7.3.0
Demo Metric 4
Demo Metric 62
Requirement #8
Req 8.1
Req 8.1.1
Demo Metric 2
Req 8.1.2
Demo Metric 5
Demo Metric 61
Demo Metric 63
Req 8.1.3
Demo Metric 57
PCIAcssRvkd
Req 8.1.4
Demo Metric 6
PCIInctvAccs
Req 8.1.5
Demo Metric 3
Demo Metric 57
Req 8.1.6
Demo Metric 2
Req 8.1.7
Demo Metric 1
Demo Metric 14
Demo Metric 59
Req 8.1.8
Demo Metric 5
Demo Metric 62
Demo Metric 63
Req 8.2
Req 8.2.1
Demo Metric 5
Demo Metric 55
Demo Metric 63
Req 8.2.2
AzPrd-SS-Enable
Req 8.2.3
Demo Metric 61
Req 8.2.4
Demo Metric 59
PCIPassRot
Req 8.2.5
Demo Metric 3
Demo Metric 62
Req 8.2.6
Demo Metric 5
Demo Metric 58
Demo Metric 63
Req 8.3
Req 8.3.1
AzPrd-SS-Enable
Demo Metric 60
Req 8.3.2
AzPrd-SS-Enable
Demo Metric 59
Req 8.4
Req 8.4.0
Demo Metric 3
Demo Metric 56
Req 8.5
Req 8.5.1
Demo Metric 5
Demo Metric 55
Req 8.6
Req 8.6.0
AzPrd-SS-Enable
Demo Metric 55
Req 8.7
Req 8.7.0
Demo Metric 5
Demo Metric 59
Req 8.8
Req 8.8.0
AzPrd-SS-Enable
Demo Metric 55
Requirement #9
Req 9.1
Req 9.1.1
Demo Metric 4
Demo Metric 62
Req 9.1.2
Demo Metric 61
SWPrtsDis
Req 9.1.3
Demo Metric 62
UATO365UsrMFA
Req 9.2
Req 9.2.0
Demo Metric 55
PrdSlackPubFile
Req 9.3
Req9.3.0
Demo Metric 1
Demo Metric 59
Req 9.4
Req 9.4.1
Demo Metric 59
UATO365UsrMFA
Req 9.4.2
Demo Metric 4
Demo Metric 62
Req 9.4.3
Demo Metric 5
Demo Metric 60
Req 9.4.4
Demo Metric 57
VisitorLogs
Req 9.5
Req 9.5.1
Demo Metric 2
Req 9.6
Req 9.6.1
AzPrd-SS-Enable
Demo Metric 62
Req 9.6.2
Demo Metric 61
UATO365UsrMFA
Req 9.6.3
Demo Metric 57
Req 9.7
Req 9.7.1
AzPrd-SS-Enable
Demo Metric 60
Req 9.8
Req 9.8.1
AzPrd-SS-Enable
Demo Metric 62
Req 9.8.2
AzPrd-SS-Enable
Demo Metric 60
Req 9.9
Req 9.9.1
Demo Metric 61
PrdSlackPubFile
Req 9.9.2
AzPrd-SS-Enable
Demo Metric 60
Req 9.9.3
AzPrd-SS-Enable
Demo Metric 57
Req 9.10
Req 9.10.0
Demo Metric 58
Requirement #10
Req 10.1
Req 10.1.0
Demo Metric 2
Demo Metric 62
Req 10.2
Req 10.2.1
Demo Metric 2
Req 10.2.2
Demo Metric 3
Demo Metric 61
Req 10.2.3
AzPrd-SS-Enable
Demo Metric 60
Req 10.2.4
Demo Metric 3
Demo Metric 59
Req 10.2.5
Demo Metric 57
UATO365UsrMFA
Req 10.2.6
Demo Metric 5
Demo Metric 59
Demo Metric 63
Req 10.2.7
Demo Metric 62
UATO365UsrMFA
Req 10.3
Req 10.3.1
Demo Metric 57
PrdSlackPubFile
Req 10.3.2
Demo Metric 5
Demo Metric 61
Req 10.3.3
Demo Metric 5
Demo Metric 60
Req 10.3.4
Demo Metric 62
PrdSlackPubFile
Req 10.3.5
Demo Metric 6
PrdSlackPubFile
Req 10.3.6
Demo Metric 4
Demo Metric 57
Req 10.4
Req10.4.2
AzPrd-SS-Enable
Demo Metric 59
Req 10.4.1
Demo Metric 2
Req 10.4.3
Demo Metric 3
Demo Metric 59
Req 10.5
Req 10.5.1
Demo Metric 1
Demo Metric 57
Req 10.5.2
Demo Metric 5
Demo Metric 58
Demo Metric 63
Req 10.5.3
Demo Metric 5
Demo Metric 59
Req 10.5.4
Demo Metric 1
Demo Metric 59
Req 10.5.5
Demo Metric 3
Demo Metric 6
Req 10.6
Req 10.6.1
DailyChecks
Demo Metric 6
Req 10.6.2
Demo Metric 60
UATO365UsrMFA
Req 10.6.3
Demo Metric 1
Demo Metric 59
Req 10.7
Req 10.7.0
Demo Metric 5
Demo Metric 57
Demo Metric 63
Req 10.8
Req 10.8.1
Demo Metric 2
Req 10.9
Req 10.9.0
Demo Metric 60
Requirement #11
Req 11.1
Req 11.1.1
PrdSlackPubFile
Req 11.1.2
Demo Metric 5
Demo Metric 57
Req 11.2
Req 11.2.0
Demo Metric 62
ExtNetScn90Days
IntScn90Days
Req 11.2.1
Demo Metric 58
ExtNetScn90Days
IntScn90Days
Req 11.2.2
Demo Metric 5
Demo Metric 57
Req 11.2.3
Demo Metric 5
Demo Metric 58
Demo Metric 63
Req 11.3
Req 11.3.1
Demo Metric 5
Demo Metric 57
Req 11.3.2
Demo Metric 3
Demo Metric 61
Req 11.3.3
Demo Metric 2
Req 11.3.4
Demo Metric 3
Demo Metric 60
Req 11.4
Req 11.4.0
Demo Metric 2
Req 11.5
Req 11.5.1
Demo Metric 57
PrdSlackPubFile
Req 11.6
Req 11.6.0
Demo Metric 4
Demo Metric 60
Requirement #12
Req 12.1
Req 12.1.1
Demo Metric 59
PolProReview
Req 12.2
Req 12.2.0
Demo Metric 59
RiskAssAppr
Req 12.3
Req 12.3.1
Demo Metric 61
UsePolAppr
Req 12.3.2
Demo Metric 57
UsePolAppr
Req 12.3.3
AsstAccLstAppr
Demo Metric 56
Req 12.3.4
AsstAccLstAppr
Demo Metric 62
Req 12.3.5
AccptUsePolAppr
Demo Metric 55
Req 12.3.6
AccptUsePolAppr
Demo Metric 55
Req 12.3.7
ApprPrdListAppr
Demo Metric 59
Req 12.3.8
Demo Metric 61
UsePolAppr
Req 12.3.9
Demo Metric 60
UsePolAppr
Req 12.3.10
Demo Metric 55
UsePolAppr
Req 12.4
Req 12.4.1
Demo Metric 6
PrdSlackPubFile
Req 12.5
Req 12.5.1
Demo Metric 1
Demo Metric 14
Demo Metric 62
Req 12.5.2
AzPrd-SS-Enable
Demo Metric 58
Req 12.5.3
Demo Metric 5
Demo Metric 57
Req 12.5.4
Demo Metric 5
Demo Metric 6
Req 12.5.5
Demo Metric 3
Demo Metric 62
Req 12.6
Req 12.6.1
Demo Metric 60
TrainingStatus
Req 12.6.2
Demo Metric 60
TrainingStatus
Req 12.7
Req 12.7.0
Demo Metric 5
Demo Metric 62
Demo Metric 63
Req 12.8
Req 12.8.1
Demo Metric 2
Req 12.8.2
Demo Metric 58
UATO365UsrMFA
Req 12.8.3
Demo Metric 61
UATO365UsrMFA
Req 12.8.4
AzPrd-SS-Enable
Demo Metric 62
Req 12.8.5
Demo Metric 56
Req 12.9
Req 12.9.0
Demo Metric 3
Demo Metric 58
Req 12.10
Req 12.10.1
Demo Metric 2
Req 12.10.2
Demo Metric 4
Demo Metric 58
Req 12.10.3
Demo Metric 2
Demo Metric 62
Req 12.10.4
Demo Metric 56
UATO365UsrMFA
Req 12.10.5
Demo Metric 3
Demo Metric 58
Req 12.10.6
Demo Metric 4
Demo Metric 55
Req 12.11
Req 12.11.1
Demo Metric 6
PrdSlackPubFile
PCI DSS 3.2.1
80.82%Status
OK: 41.67%
Degraded: 58.33%
Failed: 0%
Tags & Metadata
PCI DSS 3.2.1
Global
Metrics
Last processed
11:14 AM on 15-10-2025
Item Type
Group
Monitored State
Monitored
Approver
Jason Wilkes
-
Downstream Items
Name Result Last Seen Trend Requirement 1: Install and maintain a firewall configuration to protect cardholder dataRequirement #1 76%.#FFBB02
76%15/10/2025, 11:14:37
last observedRequirement 10: Track and monitor all access to network resources and cardholder dataRequirement #10 89%.#23D685
89%15/10/2025, 11:14:37
last observedRequirement 11: Regularly test security systems and processesRequirement #11 94%.#23D685
94%15/10/2025, 11:14:37
last observedRequirement 12: Maintain a policy that addresses information security for all personnelRequirement #12 60%.#FFBB02
60%15/10/2025, 11:14:37
last observedRequirement 2: Do not use vendor-supplied defaults for system passwords and other security parametersRequirement #2 93%.#23D685
93%15/10/2025, 11:14:37
last observedShowing 1 to 5 of 12 entries -
Historical Trend
PCI Key Control Targets
PCI Key Requirements
Requirement #3
Show options
98.08%
Sub Control Complaince
7
0
0
0-44
%45-74
%75-100
%Sep 15 Oct 15
Avg Increase of 4%
Requirement #5
Show options
62.87%
Sub Control Complaince
2
1
1
0-44
%45-74
%75-100
%Sep 15 Oct 15
Avg Increase of 7%
Requirement #8
Show options
77.94%
Sub Control Complaince
3
5
0
0-44
%45-74
%75-100
%Sep 15 Oct 15
No Avg Change
Requirement #9
Show options
82.08%
Sub Control Complaince
5
5
0
0-44
%45-74
%75-100
%Sep 15 Oct 15
Avg Increase of 5%
PCI DSS 4.0 Table
| QO-ID | Title | Name/ID | Current | Threshold | Trend | May '25 | Jun '25 | Jul '25 | Aug '25 | Sep '25 | Oct '25 | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
G-212 |
Requirement #1 |
Requirement #1 |
76.3% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
67.9% | 67.7% | 66.3% | 69.2% | 68.9% | 70.0% |
Description:Requirement 1: Install and maintain a firewall configuration to protect cardholder data. Tags:
Global Production PCI DSS 4.0
|
|
G-254 |
Requirement #10 |
Requirement #10 |
89.5% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
84.9% | 84.7% | 83.8% | 85.6% | 85.5% | 85.9% |
Description:Requirement 10: Track and monitor all access to network resources and cardholder data. Tags:
Global Production PCI DSS 4.0
|
|
G-255 |
Requirement #11 |
Requirement #11 |
94.7% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
79.1% | 78.5% | 78.1% | 80.2% | 80.0% | 79.3% |
Description:Requirement 11: Regularly test security systems and processes. Tags:
Global Production PCI DSS 4.0
|
|
G-318 |
Requirement #12 |
Requirement #12 |
60.3% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
50.5% | 49.9% | 49.3% | 50.8% | 51.1% | 51.3% |
Description:Requirement 12: Maintain a policy that addresses information security for all personnel. Tags:
Global Production PCI DSS 4.0
|
|
G-241 |
Requirement #2 |
Requirement #2 |
93.7% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
80.0% | 79.4% | 79.9% | 78.9% | 79.0% | 79.9% |
Description:Requirement 2: Do not use vendor-supplied defaults for system passwords and other security parameters. Tags:
Global Production PCI DSS 4.0
|
|
G-329 |
Requirement #3 |
Requirement #3 |
98.1% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
76.8% | 76.6% | 74.0% | 77.0% | 77.0% | 76.9% |
Description:Requirement 3: Protect stored cardholder data. Tags:
Global Production PCI DSS 4.0
|
|
G-315 |
Requirement #4 |
Requirement #4 |
71.1% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
66.4% | 62.9% | 62.4% | 66.2% | 66.8% | 66.1% |
Description:Requirement 4: Encrypt transmission of cardholder data across open, public networks. Tags:
Global Production PCI DSS 4.0
|
|
G-286 |
Requirement #5 |
Requirement #5 |
62.9% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
60.8% | 61.2% | 61.2% | 61.0% | 61.2% | 62.6% |
Description:Requirement 5: Use and regularly update anti-virus software or programs. Tags:
Global Production PCI DSS 4.0
|
|
G-310 |
Requirement #6 |
Requirement #6 |
74.2% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
60.4% | 58.3% | 58.1% | 60.4% | 61.2% | 61.4% |
Description:Requirement 6: Develop and maintain securesystems and applications. Tags:
Global Production PCI DSS 4.0
|
|
G-260 |
Requirement #7 |
Requirement #7 |
91.8% | overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green |
90.0% | 87.5% | 89.1% | 90.1% | 90.6% | 89.9% |
Description:Requirement 7: Restrict access to cardholder data by business need to know. Tags:
Global Production PCI DSS 4.0
|
Showing 1 to 10 of 12 entries