[pm90]

This sounds like the worst version of SOC controls.

[f1gm3nt]

It's all for "PCI Compliance" lol

[Brystephor]

How is it for PCI compliance? Which of the PCI DSS requirements outlines this?

[f1gm3nt]

Got me, first time I've ever had to fill out something like this

[kjs3]

Section 6.5: "Changes to all system components are managed securely."

6.5.1 is probably where the CRF form came from.

[Aeolun]

There’s a lot you can do with ‘separation of responsibilities’.