Appendices A & B
Appendix A. Endpoint Inventory Template
| Device | Role | VLAN | IP/DHCP | Owner | Notes |
|---|---|---|---|---|---|
| Register 1 | POS | POS | Reserved DHCP | Store IT | Confirm MAC address |
| KDS 1 | Kitchen display | POS | Reserved DHCP | Store IT | Confirm placement |
| Receipt printer 1 | Printer | POS | Static or reserved | Store IT | Confirm print path |
| Firewall | Edge security | Mgmt | Static | Network team | Export config after go-live |
| Access point 1 | Wireless | Mgmt | Static or reserved | Network team | SSID/VLAN mapping required |
Appendix B. PCI Review Checklist
| Control area | Question | Status |
|---|---|---|
| Segmentation | Are payment-adjacent devices isolated from guest and office networks? | Open |
| Firewall | Are payment rules limited to approved destinations? | Open |
| Remote access | Is support access approved, logged, and scoped? | Open |
| TLS | Are payment and PAR Pay destinations exempted where required? | Open |
| Evidence | Are logs, rule exports, and validation artifacts retained? | Open |