Examiners request a file showing how payments-environment citations map to controls. What should compliance provide?
Select an answer to reveal the explanation.
Short Explanation
Examiners like a clean map, not a scavenger hunt. Export the citation-to-control mappings for the payments environment and hand it over. Slogan slides, “trust us,” or giving them admin keys are the wrong package.
Full Explanation
Examiner-ready traceability reporting exports citation-to-control relationships for a defined scope such as the payments environment. Providing that export satisfies common examination requests for authority coverage evidence. Marketing slides, verbal-only assurance, or granting broad admin access are inappropriate substitutes for a scoped mapping report.