Three security experts offer their insights on scoping in PCI assessments. Jeff Man, Joan Pepin, Branden Williams and Jeff Man offer their tips on how to do it right. What they share is a primer for security leaders on making the right scope decisions for your environment. The purpose of scope in terms of PCI is to define the systems for review by your QSA or the person completing the self-assessment paperwork for the annual review and validation. Jeff shared three basic steps to consider before engaging in the scoping process. Identify where cardholder data (CHD) is present in your environment and identify the systems to be reviewed during the PCI assessment.”]
Source: https://www.csoonline.com/article/3405180/how-to-properly-scope-a-pci-assessment.html