4 ms·

This sounds like the worst version of SOC controls.

• f1gm3nt 3y ago
  It's all for "PCI Compliance" lol
  • Brystephor 3y ago
    How is it for PCI compliance? Which of the PCI DSS requirements outlines this?
    • f1gm3nt 3y ago
      Got me, first time I've ever had to fill out something like this
    • kjs3 3y ago
      Section 6.5: "Changes to all system components are managed securely." 6.5.1 is probably where the CRF form came from.
    • Aeolun 3y ago
      There’s a lot you can do with ‘separation of responsibilities’.