YouAttest GRC Survey for PCS DISS 4.0.1 YouAttest is a certified identity re-certification tool that automates identity governance. This survey will help determine if your security and governance would improve with YouAttest. Does your organization implement an access control model that enforces least privilege for all users? PCI DSS Standard 7.2.1An access control model is defined and documented, incorporating least privilege and a default deny-all setting. Please select your answer Yes No Are access permissions assigned based on job classification and function? PCI DSS Standard 7.2.2Access controls are limited by job classification and function, adhering to least privilege principles. Please select your answer Yes No Are all user accounts, including third-party accounts, reviewed at least every six months to ensure appropriateness? PCI DSS Standard 7.2.4All user accounts and access privileges, including third-party accounts, are reviewed at least every six months. Please select your answer Yes No Do system and application accounts have the minimum privileges necessary for their functions? PCI DSS Standard 7.2.5Application and system accounts have the least privileges necessary and are limited to required systems or processes. Please select your answer Yes No Are periodic reviews of application and system account access conducted based on risk analysis? PCI DSS Standard 7.2.5.1Application and system account accesses are reviewed periodically based on risk analysis, with management sign-off. Please select your answer Yes No Is access to query cardholder data repositories restricted to roles with least privilege? PCI DSS Standard 7.2.6User access to query repositories containing cardholder data is restricted to roles with least privileges, primarily via applications. Please select your answer Yes No Is access to the cardholder data environment reviewed every three months for high-risk systems? PCI DSS Standard 7.3.1All access to databases with cardholder data and remote access to the cardholder data environment is reviewed every three months. Please select your answer Yes No Are user accounts and privileges reviewed every six months to confirm business justification? PCI DSS Standard 7.3.2All user accounts and privileges are reviewed every six months to confirm business justification and address inappropriate access. Please select your answer Yes No Are roles and responsibilities for user authentication activities clearly defined and assigned? PCI DSS Standard 8.1.2Roles and responsibilities for user identification and authentication activities are documented, assigned, and understood. Please select your answer Yes No Are third-party IDs accessing the cardholder data environment reviewed every three months? PCI DSS Standard 8.2.3Third-party IDs for accessing the cardholder data environment are reviewed every three months and properly authenticated. Please select your answer Yes No 1 out of 10 Thank you for completing the PCS DISS 4.0.1 Assessment! Your responses have been successfully recorded, and your personalized results are now available. Below, you’ll find your overall score along with a detailed breakdown of key controls that may require attention. Use these insights to strengthen and refine your security posture. Important: Please fill out the contact form below, to retrieve your full results and in-depth analysis. Name Email Business Phone GRC Partner Email (optional) Time's up
