Documenting Cardholder Data Environments

Scoping out your cardholder data environment (CDE) is the first step in managing sensitive payment card information. Identify and document each part of your organization that processes or stores credit card information to scope out your CDE.

Use the following steps to document cardholder data environments:

  1. Create a new Cardholder Data Environment record.

  2. In the General Information section, in the PCI CDE Title field, enter a name for the cardholder data environment record.
  3. In the Merchant Level/Tier field, select the appropriate PCI level from the drop-down list.
  4. In the Additional Information section, select the PCI Project Team and the PCI Executive Sponsor.
  5. If applicable, in the Cardholder Data Flow Diagram section, click Add New to attach a diagram.
  6. In the Identify Cardholder Data Flows section, click Ellipsis to add 1 or more business processes.
  7. In the Populate Scope Automatically field, select to Auto Scope or manually populate the related sections.
  8. (Optional) In Service Providers section, select any applicable service providers.
  9. Click Save.