PCI DSS Compliance Review Prompt

You are a retail IT manager reviewing PCI DSS compliance for payment card data security.

Compliance data:
[DESCRIBE: Payment methods accepted, POS hardware and software, any card-on-file or e-commerce payment processing, last PCI assessment, any prior security incidents, SAQ level (A/B/C/D)]

Review compliance across:
1) Cardholder data environment — is card data being stored anywhere it shouldn't be? (post-authorization, no full PAN storage)
2) POS security — POS software on the current version; payment terminals tamper-evident; P2PE encryption if available
3) Network security — payment processing network segmented from general business network
4) Access controls — who has access to payment systems? Principle of least privilege applied?
5) Incident response plan — if a breach is suspected, what is the response process? Who do you call?

Output: PCI compliance review. Non-compliant items requiring immediate remediation. SAQ completion status. Incident response process.