AI Reviewer Template: PCI DSS Compliance Review

A compliance reviewer for organisations that process, store, or transmit payment card data and must demonstrate PCI DSS compliance. This template evaluates cardholder data environment documentation, network security architecture and controls, access control and authentication documentation, vulnerability management and testing evidence, and policy and procedure completeness. PCI DSS non-compliance can result in significant fines, increased transaction fees, and loss of card processing privileges. The reviewer catches common PCI DSS documentation failures like cardholder data flow diagrams that are incomplete or inaccurate, network segmentation documentation that does not clearly define the cardholder data environment boundary, access control policies that do not meet PCI DSS requirements for least privilege and unique identification, vulnerability scan and penetration test documentation that is incomplete or outdated, and incident response plans that do not address payment card specific breach scenarios.