Worksheet

Checkout scope worksheet

The worksheet fits on one printed page. The top section records how card entry works today, whether redirect, iframe, hosted fields or own form, plus the provider and the integration date. Below it sits a table of every script on the payment page, with columns for domain, purpose, owner, approval date and last change. The last section lists patching, admin access and annual provider status checks, each assigned to a named person who signs and dates the line every year.

Name: ______________________   Business: ______________________   Date: ______________

Scroll the table sideways to see every column.

Cross out or rewrite any heading that does not fit your business. From the guide “PCI DSS for small online stores: what changes with hosted payments”, www.gullysystem.com/blog/pci-dss-for-small-online-stores-what-changes-with-hosted-payments