PCI DSS: A Practical Guide to implementing and maintaining compliance, Third Edition

APPENDIX 2 – PCI DSS PROJECT PLAN

Steps	Description	Duration	Start	Finish
Step 1
	Establish PCI project	2 days	03/03/08	04/03/08
	Agree objectives and sponsor	1 day	05/03/08	05/03/08
	Agree escalation/communication	1 day	06/03/08	06/03/08
	Create PID	2 days	07/03/08	10/03/08
	Sign off on PID	0 days	10/03/08	10/03/08
	Create draft SIP	2 days	11/03/08	12/03/08
Step 2
	Determine the scope	1 day	13/03/08	13/03/08
	Scope workshop	1 day	14/03/08	14/03/08
	Document scope	2 days	17/03/08	18/03/08
	Sign off on scope	0 days	18/03/08	18/03/08
Step 3
	Review IS policy	2 days	19/03/08	20/03/08
	Review set of supporting policies	2 days	21/03/08	24/03/08
	Conduct policy analysis	2 days	25/03/08	26/03/08
	Make ...