Cardholder Data Environment
Scoping inventory — which components are in the CDE, connected-to, or out of scope.
Components
5
5
In scope
3
3
Out of scope
1
1
Outsourced
1
1
All components
| ID | System component | Type | Segment | Stores PAN | Owner | Scope | Actions |
|---|---|---|---|---|---|---|---|
| CDE-001 | Payment API gateway | Application | CDE | No (tokenized) | Arjun Rao | In scope | |
| CDE-002 | Checkout web frontend | Application | Connected-to | No | Arjun Rao | In scope | |
| CDE-003 | Tokenization vault (Stripe) | Third party | Outsourced | Yes (provider) | Priya Menon | Provider responsibility | |
| CDE-004 | Finance reconciliation DB | Database | Connected-to | No (last 4 only) | Priya Menon | In scope | |
| CDE-005 | Corporate wifi | Network | Out of scope | No | Daniel Chen | Out of scope |