PABP User Implementation Documentation

[GMagyar]

This might be an odd question, but we are currently attempting to become PCI/PABP Compliant and have made it through the Technical Document phase with our Auditors, and have provided most of the Pre-Assessment items. This is my first venture into this type of thing and was wondering if there were any sites out there that would help me prepare my user Documentation. Is there a specific flow? Are there samples out there? i am curious how detailed it needs to be.

Any help would be appreciated. This is an overwhelming process....:(

[dbergert]

This might be an odd question, but we are currently attempting to become PCI/PABP Compliant and have made it through the Technical Document phase with our Auditors, and have provided most of the Pre-Assessment items. This is my first venture into this type of thing and was wondering if there were any sites out there that would help me prepare my user Documentation. Is there a specific flow? Are there samples out there? i am curious how detailed it needs to be.

Any help would be appreciated. This is an overwhelming process....:(

Did you ask your auditor ? I would suspect that they would be able to give some general guidelines ? I think the content is more important then the presentation, but remember what it is; a guide to your customers on how to securely configure your application to PABP requirements. - so the flow should make sense to your customer.

Google is also your friend here;

http://www.google.com/search?hl=en&q=pabp+implementation+guide&btnG=Search

for some examples.

[lyalc]

Talk to your auditor.
During the testing process, your auditor will need to follow that documentation to install, configure and use the product, so use them as an informal 'useability tester' for the documentation.

lyalc

[GMagyar]

Thanks to all. This is an interesting process.