12.9.2—Additional requirement for service providers only: TPSPs support their customers’ requests for information to meet Requirements 12.
>Requirement Description
Additional requirement for service providers only: TPSPs support their customers’ requests for information to meet Requirements 12.8.4 and 12.8.5 by providing the following upon customer request: PCI DSS compliance status information (Requirement 12.8.4). Information about which PCI DSS requirements are the responsibility of the TPSP and which are the responsibility of the customer, including any shared responsibilities (Requirement 12.8.5), for any service the TPSP provides that meets a PCI DSS requirement(s) on behalf of customers or that can impact security of customers’ cardholder data and/or sensitive authentication data. Applicability Notes This requirement applies only when the entity being assessed is a service provider.
>Cross-Framework Mappings
Ask AI
Configure your API key to use AI features.