[Brystephor]

How is it for PCI compliance? Which of the PCI DSS requirements outlines this?

[f1gm3nt]

Got me, first time I've ever had to fill out something like this

[kjs3]

Section 6.5: "Changes to all system components are managed securely."

6.5.1 is probably where the CRF form came from.

[Aeolun]

There’s a lot you can do with ‘separation of responsibilities’.