Finding F2
The Payment Card Industry (PCI) self-assessment questionnaire (SAQ) process inadequately involves IT resulting in a lack of IT awareness of the PCI Compliance process and errors on attestation reporting.
Jury report: Mono County Cybersecurity Preparedness · PDF page 7
Permanent linkOfficial responses
Mono County Information Technology Director
Partly agrees and partly disagrees, explaining that third-party processors and Finance manage payments while IT should assist with assessment and security review.
Read official response · PDF page 3The response’s engagement is evaluated independently of whether the County’s security measures are effective.
This review evaluates the response document. Implementation claims have not been independently verified.
Mono County Board of Supervisors
Partly agrees and partly disagrees, explaining that third-party processors and Finance manage payments while IT should assist with assessment and security review.
Read official response · PDF page 11The response’s engagement is evaluated independently of whether the County’s security measures are effective.
This review evaluates the response document. Implementation claims have not been independently verified.