anchor.diff:  PCI 1.3.7
   PCI 1.3.8
   PCI 1.4
  -PCI 1.5",PCI Program,,,,,,,,,,,,,,
  +PCI 1.5",PCI Program,,,,,,,,,,,,,
   ,02_PCI,PCI Requirement 2 - System Passwords and Configuration,Do not use vendor-supplied defaults for system passwords and other security parameters,,albert@reciprocitylabs.com,Draft,,,,,"PCI 2.1
   PCI 2.1.1
   PCI 2.2
  
positive.code: PCI 2.3
  PCI 2.4
  PCI 2.5
  PCI 2.6",PCI Program,,,,,,,,,,,,,,
  ,,,,,,,,,,,,,,,,,,,,,,,,,,
  Object type,"Must be unique. Can be left empty for autogeneration. If updating or deleting, code is required",,,,,,,,,,,,,,,,,,,,,,,,,
  Assessment,Code*,Audit*,Title*,Description,Notes,Test Plan,Creator,Assignee,Effective Date,Stop Date,State,Primary Contact,Conclusion: Design,Conclusion: Operation,Secondary Contact,Assessment URL,Reference URL,,,,,,,,,
  ,CA.PCI 1.1,AUDIT-PCI,PCI 1.1 Firewall and Router Configuration assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 1.2,AUDIT-PCI,PCI 1.2 Firewall and Router Connections Configuration assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Needs improvement,Needs improvement,,,,,,,,,,,,
  ,CA.PCI 1.2.1,AUDIT-PCI,PCI 1.2.1 Traffic Restrictions assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Not Applicable,Not Applicable,,,,,,,,,,,,
  ,CA.PCI 1.2.2,AUDIT-PCI,PCI 1.2.2 Secure and Synchronize assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,,,,,,,,,,,,,,
  ,CA.PCI 1.2.3,AUDIT-PCI,PCI 1.2.3 Perimeter Firewalls assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 1.3,AUDIT-PCI,PCI 1.3 Examine Router and Firewall Configurations assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 1.3.1,AUDIT-PCI,PCI 1.3.1 DMZ to Limit Inbound Traffic assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 1.3.2,AUDIT-PCI,PCI 1.3.2 DMZ Limiting IP Addresses assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 1.3.3,AUDIT-PCI,PCI 1.3.3 Direct Connections Prohibited assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 1.3.4,AUDIT-PCI,PCI 1.3.4 Anti-Spoofing assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Needs improvement,Needs improvement,,,,,,,,,,,,
  ,CA.PCI 1.3.5,AUDIT-PCI,PCI 1.3.5 Outbound Traffic Authorized assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 1.3.6,AUDIT-PCI,PCI 1.3.6 Stateful Inspection assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 1.3.7,AUDIT-PCI,PCI 1.3.7 Internal Network Zone assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 1.3.8,AUDIT-PCI,PCI 1.3.8 Do Not Disclose to Unauthorized Parties assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Needs improvement,Needs improvement,,,,,,,,,,,,
  ,CA.PCI 1.4,AUDIT-PCI,PCI 1.4 Personal Firewall Software assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,,,,,,,,,,,,,,
  ,CA.PCI 1.5,AUDIT-PCI,PCI 1.5 Managing Firewalls assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,,,,,,,,,,,,,,
  ,CA.PCI 2.1,AUDIT-PCI,PCI 2.1 Change Vendor-Supplied Defaults assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,,,,,,,,,,,,,,
  ,CA.PCI 2.1.1,AUDIT-PCI,PCI 2.1.1 Wireless Vendor Defaults assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Needs improvement,Needs improvement,,,,,,,,,,,,
  ,CA.PCI 2.2,AUDIT-PCI,PCI 2.2 Configuration Standards assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,,,,,,,,,,,,,,
  ,CA.PCI 2.2.1,AUDIT-PCI,PCI 2.2.1 One Primary Function Per Server assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 2.2.2,AUDIT-PCI,PCI 2.2.2 Necessary Services assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 2.2.3,AUDIT-PCI,PCI 2.2.3 Additional Security Features assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 2.2.4,AUDIT-PCI,PCI 2.2.4 System Security Perimeters assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Not Applicable,Not Applicable,,,,,,,,,,,,
  ,CA.PCI 2.2.5,AUDIT-PCI,PCI 2.2.5 Remove Unnecessary Functionality assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Needs improvement,Needs improvement,,,,,,,,,,,,
  ,CA.PCI 2.3,AUDIT-PCI,PCI 2.3 Encryption assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 2.4,AUDIT-PCI,PCI 2.4 Inventory of System Components assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 2.5,AUDIT-PCI,PCI 2.5 Examine Documentation and Interview Personnel assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,Effective,Effective,,,,,,,,,,,,
  ,CA.PCI 2.6,AUDIT-PCI,PCI 2.6 Testing Procedures assessment for 2015: PCI-DSS 3.0 Security Program (Reference Program) - Audit 1 1,,,,danny@reciprocitylabs.com,danny@reciprocitylabs.com,,,Not Started,danny@reciprocitylabs.com,,,,,,,,,,,,,,
  ,,,,,,,,,,,,,,,,,,,,,,,,,,
  Object type,"Must be unique. Can be left empty for autogeneration. If updating or deleting, code is required",,,,,,,,,,,,,,,,,,,,,,,,,
  System,Code*,Title*,Description,Notes,Owner*,Effective Date,Stop Date,State,Primary Contact,Network Zone,Secondary Contact,System URL,Reference URL,map:program,,,,,,,,,,,,
  ,SYSTEM-1,Application Delivery System,Automated system for classifying incoming applications and initial data-base entry for candidates,Example System<br>,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-3,Web Application,,Example System<br>,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-4,Salesforce CRM,,Example System<br>,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-5,Workday Financial Management,,Example System<br>,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-6,Authorization Roles and Permissions,"<b>Authorization </b>(also spelt <b>Authorisation</b>) is the function of specifying access rights to resources, which is related to <a href=""http://en.wikipedia.org/wiki/Information_security"" title=""Link: http://en.wikipedia.org/wiki/Information_security"">information security</a> and <a href=""http://en.wikipedia.org/wiki/Computer_security"" title=""Link: http://en.wikipedia.org/wiki/Computer_security"">computer security</a> in general and to <a href=""http://en.wikipedia.org/wiki/Access_control"" title=""Link: http://en.wikipedia.org/wiki/Access_control"">access control</a> in particular. More formally, ""to authorize"" is to define access policy. For example, <a href=""http://en.wikipedia.org/wiki/Human_resources"" title=""Link: http://en.wikipedia.org/wiki/Human_resources"">human resources</a> staff are normally authorized to access employee records, and this policy is usually formalized as access control rules in a computer system. During operation, the system uses the access control rules to decide whether access requests from (<a href=""http://en.wikipedia.org/wiki/Authentication"">authenticated</a>) consumers shall be approved (granted) or disapproved (rejected). Resources include individual files' or items' <a href=""http://en.wikipedia.org/wiki/Data"" title=""Link: http://en.wikipedia.org/wiki/Data"">data</a>, <a href=""http://en.wikipedia.org/wiki/Computer_program"" title=""Link: http://en.wikipedia.org/wiki/Computer_program"">computer programs</a>, computer <a href=""http://en.wikipedia.org/wiki/Computer_hardware"" title=""Link: http://en.wikipedia.org/wiki/Computer_hardware"">devices</a> and functionality provided by <a href=""http://en.wikipedia.org/wiki/Computer_application"" title=""Link: http://en.wikipedia.org/wiki/Computer_application"">computer applications</a>.",Example System<br>,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-7,ACLS,"<p>An <b>access control list</b> (<b>ACL</b>), with respect to a computer file system, is a list of <a href=""http://en.wikipedia.org/wiki/File_system_permissions"">permissions</a> attached to an <a href=""http://en.wikipedia.org/wiki/Computer_file"">object</a>. An ACL specifies which users or system processes are granted access to objects, as well as what operations are allowed on given objects.<a href=""http://en.wikipedia.org/wiki/Access_control_list#cite_note-1"">[1]</a> Each entry in a typical ACL specifies a subject and an operation. For instance, if a file has an ACL that contains (Alice, delete), this would give Alice permission to delete the file.</p><div><br></div><p></p><div></div>",Example System<br>,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,http://en.wikipedia.org/wiki/Access_control_list,PCI Program,,,,,,,,,,,,
  ,SYSTEM-8,HIRE,,Example System,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-9,Asset Repository Management System,"Asset management is a systematic process of operating, maintaining, upgrading, and disposing of assets cost-effectively. Organizations need to identify all assets and create and maintain security controls around them.",Example System<br>,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-10,GitHub,"All Reciprocity code is hosted on <a href=""https://github.com"">github.com</a>",,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,https://github.com/reciprocity,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-11,ARTY,"Automated front end testing framework, relying on Selenium/WebDriver and run as a Jenkins process",,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,http://ci.reciprocitylabs.com:8080/,https://github.com/dtzinov/ggrc-test,PCI Program,,,,,,,,,,,,
  ,SYSTEM-12,Jumpcloud,"<img alt="""" src=""https://console.jumpcloud.com/img/jump-cloud-logo.png""><br>Server Management from the Cloud<br><br><div><h2>JUMPCLOUD AUTOMATES SERVER MANAGEMENT</h2><div><div></div></div></div><div><h2></h2><h5><a href=""http://www.jumpcloud.com/simple-powerful-user-management/"">User management</a></h5><h5><ul><li>Manage Admin/SSH user access  add, change, terminate</li><li>Manage SSH keys and multi-factor authentication</li><li>Centralized logging and audit history</li><li>Web-based password reset</li><li>Fully-elastic: auto-provision user accounts when scaling up or down</li><li>Linux and Windows support</li></ul></h5><h5><a href=""http://www.jumpcloud.com/patch-management/"">Patch management</a></h5><h5><ul><li>Track needed patches across your entire organization</li><li>Ensure patches are up-to-date</li><li>Zero-in on the most critical patch requirements</li><li>Prioritize network-listening services (the first vector of attack)</li></ul></h5><h5>Dynamic configuration management</h5><h5><ul><li>Manage dynamic configurations such as root logins, SSH keys, etc.</li><li>RESTful JSON-based API</li></ul></h5><h5><a href=""http://www.jumpcloud.com/easy-attack-monitoring/"">Security management</a></h5><h5><ul><li>Detecting compromises from brute force attacks</li><li>Monitor admin activity  assess and alert on suspicious sudo commands</li><li>Monitor suspicious login activity  easily identify anomalous logins</li></ul></h5><h5>Compliance management</h5><h5><ul><li>Enforce PCI Section 8  user access and authentication</li></ul></h5></div>",<h2><br></h2>,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,https://www.jumpcloud.com/signup/,http://www.jumpcloud.com/features/,PCI Program,,,,,,,,,,,,
  ,SYSTEM-13,FIN-SS26,FIN-SS26  Unix Sun   192.169.1.1,VM,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-14,Human resource management system (HRMS),,,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-15,Physical access control system,,,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-16,FINSS-30,IP=191.126.1.2,,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-17,Unix-Vm-Fin-ss27,IP=192.168.1.1,Unix box used for apache and tomcat web server,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-18,Unix-Vm-Fin-ss28,IP=192.168.1.2,,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-19,Cisco ASA Firewall,Cisco ASA 5520<br>Serial#: <br>Inside Interface:  <br>DMZ Interface:  <br>Outside Interface:  <br>Comment: Cisco Perimeter Firewall,,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-20,Dell R-710 Server,"Hostname: <br>Private IP Address: <br>Public IP Address: <br>Operating System:<br>System Purpose: Web Services, Database etc.<br>Serial Number: <br>Enter Zone: <br>Physical Location: <br>Department: <br>Enter Asset Tag: <br>Comments: <br><br><br>",,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-21,IDS / IPS Devices,Hostname: <br>Private IP Address: <br>Public IP Address: <br>Serial Number: <br>Enter Zone: <br>Physical Location: <br>Department: <br>Enter Asset Tag: <br>Comments: <br>,,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-22,VMWare Host System,Hostname: <br>Private IP Address: <br>Public IP Address: <br>VLAN Data: <br>Number of Guests: <br>Operating System: <br>Management Console URL: <br>Serial Number: <br>Enter Zone: <br>Physical Location: <br>Department: <br>Enter Asset Tag: <br>Comments: <br>,,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-23,Router Devices,Hostname: <br>Private IP Address: <br>Public IP Address: <br>Operating System: <br>Security Zone:<br>Serial Number: <br>Enter Zone: <br>Physical Location: <br>Department: <br>Enter Asset Tag: <br>Comments: <br>,"More Entries should be added for Network Zone:<br>QA, Development, CDE, etc.",albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-24,Network Switching Devices,Hostname: <br>Private IP Address: <br>Public IP Address: <br>Serial Number: <br>Operating System: <br>VLAN's Supported: <br>Routing Protocols: <br>Enter Zone: <br>Physical Location: <br>Department: <br>Enter Asset Tag: <br>Comments: <br>,,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-25,VMWare Guest System,Hostname: <br><span>Private IP Address: </span><br><span>Public IP Address: </span><br><span>VLAN Data: </span><br><span>Number of Guests: </span><br><span>Operating System: </span><br><span>Serial Number: </span><br><span>Enter Zone: </span><br><span>Physical Location: </span><br><span>Department: </span><br><span>Enter Asset Tag: </span><br><span>Comments: </span><br>,,albert@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-199,HCM Workday,,,bthies@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-200,SAP,,,bthies@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-201,PeopleSoft,,,bthies@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,SYSTEM-202,Hyperion,,,bthies@reciprocitylabs.com,,,Draft,albert@reciprocitylabs.com,,,,,PCI Program,,,,,,,,,,,,
  ,,,,,,,,,,,,,,,,,,,,,,,,,,
  Object type,"Must be unique. Can be left empty for autogeneration. If updating or deleting, code is required",,,,,,,,,,,,,,,,,,,,,,,,,
  Audit,Code*,Program,Title*,Description,Planned Start Date,Planned End Date,Planned Report Period from,Planned Report Period to,Status*,Internal Audit Lead*,Auditors,,,,,,,,,,,,,,,
  ,AUDIT-SOC,SOC2/3,2014: SOC 2/3 - Audit 1,,,,,,Planned,bthies@reciprocitylabs.com,,,,,,,,,,,,,,,,
  ,AUDIT-Consolidated,Consolidated,SOC program,,,,,,Planned,bthies@reciprocitylabs.com,,,,,,,,,,,,,,,,
  ,AUDIT-PCI,PCI Program,PCI Audit,,,,,,Planned,bthies@reciprocitylabs.com,,,,,,,,,,,,,,,,
  ,,,,,,,,,,,,,,,,,,,,,,,,,,
  Object type,,,,,,,,,,,,,,,,,,,,,,,,,,
  Person,Name,Email*,Company,Role,,,,,,,,,,,,,,,,,,,,,,
  ,Anze,anze@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Albert,albert@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Brad Thies,bthies@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Miha Zidar,miha@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Rob,rob@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Ken,ken@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Jamila,jamila@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Brad Thies,bthies@barradvisory.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Urban,urban@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Amy Peterson,amy@reciprocitylabs.com,"Reciprocity, Inc.",Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Predrag,predrag@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Jost,jost@reciprocitylabs.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Danny,danny@reciprocitylabs.com,Reciprocity,Administrator,,,,,,,,,,,,,,,,,,,,,,
  ,Jeff,jeff.tchang@gmail.com,,Administrator,,,,,,,,,,,,,,,,,,,,,,
  
negative.code: Perform a Risk Assessment (Annually)
  Perform Periodic Tasks as Required
  Procure an ASV Vendor
  ","The Payment Card Industry Data Security Standard (PCI DSS) is a proprietary information security standard for organizations that handle cardholder information for the major debit, credit, prepaid, e-purse, ATM, and POS cards.",miha@reciprocitylabs.com,,,,,Draft,,,,,https://www.pcisecuritystandards.org/,https://www.pcisecuritystandards.org/,,,,,,,,,
  ,SOC2/3,2014: SOC 2/3 - Audit 1,,,miha@reciprocitylabs.com,,,,,Draft,,,,,,,,,,,,,,,
  ,Consolidated,SOC program,,,miha@reciprocitylabs.com,,,,,Draft,,,,,,,,,,,,,,,
  ,,,,,,,,,,,,,,,,,,,,,,,,,
  Object type,"Must be unique. Can be left empty for autogeneration. If updating or deleting, code is required",,,,,,,,,,,,,,,,,,,,,,,,
  Control,Code*,Title*,Description,,,Owner*,Effective Date,Stop Date,State,Assertions,Categories,Primary Contact,Fraud Related,Significance,Kind/Nature,Type/Means,Principal Assessor,Secondary Assessor,Secondary Contact,Control URL,Reference URL,Frequency,Test Plan,Notes,map:program
  ,PCI 1.1,PCI 1.1 Firewall and Router Configuration,"1.1 Establish and implement firewall and router configuration standards that include the following:<br><br>
  
  1.1.1 A formal process for approving and testing all network connections and changes to the firewall and router configurations<br><br>
  