View source for PCI-7.2:

<blockquote style="background: #C8CDC7; padding: 1em; margin-left: 0.5em;">
<br>
:'''Establish a mechanism for systems with multiple users that restricts access based on a user’s need to know, and is set to “deny all” unless specifically allowed.'''<br>
<br>
::'''PCI-7.2:''' Examine system settings and vendor documentation to verify there is an access control system in place, and that it is implemented to include the following:<br>
<br>
::* Coverage of all system components.
::* Assignment of privileges to individuals based on job classification and function.
::* “Deny-all” setting by default (some access control systems are set by default to “allow-all” thereby allowing access unless/until a rule is written to specifically deny it).
<br>
</blockquote>
<br>
'''Testing Procedures'''
<blockquote style="background: white; border: 1px solid black; padding: 1em;">
Insert testing guidance here.
</blockquote>
'''Testing Frequency'''
<blockquote style="background: white; border: 1px solid black; padding: 1em;">
Describe testing frequency here.
<br>
</blockquote>

'''Evidence Archive Location'''
<blockquote style="background: white; border: 1px solid black; padding: 1em;">
Insert hyperlink or location of evidence archive.
<br>
</blockquote>

'''Control Stewards Process Narrative'''
<blockquote style="background: white; border: 1px solid black; padding: 1em;">
<p><font color=#008000>Provide control steward commentary indicating the formal methodology in place.</font></p>

<br>
'''Control Steward – Jon Doe'''
<br>
</blockquote>

'''Process Illustration'''
<blockquote style="background: white; border: 1px solid black; padding: 1em;">
Replace this test by inserting a process diagram, flowchart or other visual representation to illustrate the process narrative as necessary. Include a brief description of the process illustration.
<br>
</blockquote>

'''Control Status and Auditors Commentary'''
<blockquote style="background: white; border: 1px solid black; padding: 1em;">
<p><font color=#008000>The control is effective.</font></p>
<br>
[[Image:greenlock.jpg]]<br>
<br>
Status is acceptable.
<br>
</blockquote>

'''Control Exception Commentary'''
<blockquote style="background: white; border: 1px solid black; padding: 1em;">
Status is acceptable.
<br>
</blockquote>

'''Remediation Plan'''
<blockquote style="background: white; border: 1px solid black; padding: 1em;">
Remediation is not required at this time.
<br>
</blockquote>
<br>

--[[User:Mdpeters|Mdpeters]] 09:10, 1 March 2007 (EST)