4.1.2Processes and mechanisms for protecting cardholder data with strong cryptography during transmission over open, public networks are defined and documented

Defined Approach Requirements:

Roles and responsibilities for performing activities in Requirement 4 are documented, assigned, and understood.

Defined Approach Testing Procedures:

4.1.2.a Examine documentation to verify that descriptions of roles and responsibilities for performing activities in Requirement 4 are documented and assigned.

4.1.2.b Interview personnel with responsibility for performing activities in Requirement 4 to verify that roles and responsibilities are assigned as documented and are understood.