3 ms·
The endpoints don't need to be in scope if they're not storing PII.
by clinta 11y ago
The endpoints don't need to be in scope if they're not storing PII.
- dogma1138 11y agoPCI-DSS the endpoints you use to connect to the CHD environment are in scope, other endpoints that are used to interact with CHD data e.g. POI's or CS terminals are also in scope. HIPAA endpoints that are used to access, view or input patient data are in scope. I am a QSA.