{"id":3468,"date":"2020-08-17T11:55:00","date_gmt":"2020-08-17T11:55:00","guid":{"rendered":"http:\/\/10.24.225.70\/?p=3468"},"modified":"2026-04-14T20:31:09","modified_gmt":"2026-04-14T18:31:09","slug":"the-importance-of-documentation-in-pci-dss","status":"publish","type":"post","link":"https:\/\/complior.se\/en\/the-importance-of-documentation-in-pci-dss\/","title":{"rendered":"The Importance of Documentation in PCI DSS"},"content":{"rendered":"
\n
\n
<\/svg><\/span>Tillbaka till resurser<\/span><\/a><\/div>\n\n\n\nBlog<\/span>\n\n\n\n

The Importance of Documentation in PCI DSS<\/h1>\n\n\n\n
\r\n\t\r\n\t\t<\/rect>\r\n\t\t<\/line>\r\n\t\t<\/line>\r\n\t\t<\/line>\r\n\t<\/svg>\r\n\t\r\n\t\tAug 17, 2020\t<\/span>\r\n<\/div>\n\n\n

<\/svg><\/span>2 min <\/span><\/h1><\/div>\n<\/div>\n\n\n\n
\"cartoon<\/figure>\n<\/div><\/div>\n\n\n\n
\n
\n

Why Is Documentation So Important in PCI DSS?<\/h2>\n\n\n\n

You need to be as good with documentation as you are with the technical and physical aspects. In fact, the documents should be the blueprint of your technology and environment. More than 45% of PCI DSS requirements demand that you fulfill documentation requirements in the form of written policies, diagrams, guidelines, or checklists.<\/p>\n<\/div>\n\n\n\n

\n

Documentation as the Foundation of Compliance<\/h2>\n\n\n\n

Producing a document that defines and explains your company and business is one of the most important parts of the PCI DSS compliance process. The document has to match the actual environment configuration and your work practices, which is a challenge. If there is a mismatch during the audit process, it becomes a major issue.<\/p>\n\n\n\n

Therefore, it is wise to start with documentation at the same time as you begin setting up your environment for PCI DSS\u2014ideally even beforehand.<\/p>\n\n\n\n

\n

Documentation Must Be Followed<\/h3>\n\n\n\n

However, documentation is not just about writing policies, procedures, roles, and processes\u2014you actually have to follow them.<\/p>\n\n\n\n

Policies and procedures are very specific to each company and should be driven and enforced by the personnel who work with them daily.<\/p>\n\n\n\n

If you receive help from a third party, they need to work very closely with your company to produce accurate documentation. It is also important to ensure that the documentation matches your environment and working style.<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n

Documentation in the Audit Process<\/h2>\n\n\n\n

Policies and procedures are among the most important elements during an audit and are often the most time-consuming. They serve as hard evidence that your framework meets the required standards.<\/p>\n\n\n\n

\n

Keep Documentation Clear and Continuously Improved<\/h3>\n\n\n\n

Policies and procedures should be straightforward and easy to understand. At the same time, confusion and different interpretations will always occur. Continuous improvement is necessary, and completely normal.<\/p>\n<\/div>\n<\/div>\n\n\n\n

\n

Guidelines for Policies and Procedures<\/h2>\n\n\n\n

Some guidelines to keep in mind:<\/p>\n\n\n\n

    \n
  • Try to cover as many areas of your company as possible<\/li>\n\n\n\n
  • Define policies, processes, and working methods in depth<\/li>\n\n\n\n
  • Clearly define and explain how they are implemented<\/li>\n\n\n\n
  • Explain your working standards and support them with reliable resources and knowledge<\/li>\n\n\n\n
  • Be open-minded and clear with your business justifications, especially for a QSA<\/li>\n\n\n\n
  • Break down policies into smaller, topic-specific documents to avoid constant updates to large documents<\/li>\n\n\n\n
  • Define roles and clearly assign responsibilities<\/li>\n<\/ul>\n<\/div>\n\n\n\n
    \n

    From Documentation to Practice<\/h2>\n\n\n\n

    Having a well-designed and clearly defined policy and procedure document is good, but not enough. You must enforce these policies and procedures as part of your daily routine. This is what audits are designed to verify: that your organization performs not only on paper, but also in real-world operations.<\/p>\n<\/div>\n<\/div><\/div>","protected":false},"excerpt":{"rendered":"

    Even the most expensive equipment and sophisticated knowledge in the company isn\u2019t enough to get you through the PCI-DSS compliance process.<\/p>","protected":false},"author":2,"featured_media":51210,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"blogg","format":"standard","meta":{"_editorskit_title_hidden":false,"_editorskit_reading_time":2,"_editorskit_is_block_options_detached":false,"_editorskit_block_options_position":"{}","_eb_attr":"","inline_featured_image":false,"_uag_custom_page_level_css":"","wpm_timeformat":"","_wpm_styles":"","footnotes":""},"categories":[118],"tags":[117,127,128],"class_list":["post-3468","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blogg","tag-blog","tag-pci","tag-pci-dss"],"yoast_head":"\nThe Importance of Documentation in PCI DSS - Complior<\/title>\n<meta name=\"description\" content=\"Even the most expensive equipment and sophisticated knowledge in the company isn\u2019t enough to get you through the PCI-DSS compliance process.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/complior.se\/en\/the-importance-of-documentation-in-pci-dss\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"The Importance of Documentation in PCI DSS - Complior\" \/>\n<meta property=\"og:description\" content=\"Even the most expensive equipment and sophisticated knowledge in the company isn\u2019t enough to get you through the PCI-DSS compliance process.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/complior.se\/en\/the-importance-of-documentation-in-pci-dss\/\" \/>\n<meta property=\"og:site_name\" content=\"Complior\" \/>\n<meta property=\"article:published_time\" content=\"2020-08-17T11:55:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-14T18:31:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1616\" \/>\n\t<meta property=\"og:image:height\" content=\"749\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Kikki Bostrom\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kikki Bostrom\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/\"},\"author\":{\"name\":\"Kikki Bostrom\",\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/person\\\/841f8a57425589a6d7f13c201d345016\"},\"headline\":\"The Importance of Documentation in PCI DSS\",\"datePublished\":\"2020-08-17T11:55:00+00:00\",\"dateModified\":\"2026-04-14T18:31:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/\"},\"wordCount\":449,\"publisher\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/Documents_featured-01.png\",\"keywords\":[\"Blog\",\"PCI\",\"PCI DSS\"],\"articleSection\":[\"Blogg\"],\"inLanguage\":\"en-GB\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/\",\"url\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/\",\"name\":\"The Importance of Documentation in PCI DSS - Complior\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/Documents_featured-01.png\",\"datePublished\":\"2020-08-17T11:55:00+00:00\",\"dateModified\":\"2026-04-14T18:31:09+00:00\",\"description\":\"Even the most expensive equipment and sophisticated knowledge in the company isn\u2019t enough to get you through the PCI-DSS compliance process.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/#primaryimage\",\"url\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/Documents_featured-01.png\",\"contentUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2020\\\/08\\\/Documents_featured-01.png\",\"width\":1616,\"height\":749,\"caption\":\"cartoon of documents and a folder\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/complior.se\\\/the-importance-of-documentation-in-pci-dss\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/complior.se\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"The Importance of Documentation in PCI DSS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/complior.se\\\/#website\",\"url\":\"https:\\\/\\\/complior.se\\\/\",\"name\":\"Complior\",\"description\":\"Security beyond compliance\",\"publisher\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/complior.se\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/complior.se\\\/#organization\",\"name\":\"Complior\",\"url\":\"https:\\\/\\\/complior.se\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Complior_logo_dark-scaled.png\",\"contentUrl\":\"https:\\\/\\\/complior.se\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/Complior_logo_dark-scaled.png\",\"width\":2560,\"height\":960,\"caption\":\"Complior\"},\"image\":{\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/complior.se\\\/#\\\/schema\\\/person\\\/841f8a57425589a6d7f13c201d345016\",\"name\":\"Kikki Bostrom\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g\",\"caption\":\"Kikki Bostrom\"},\"url\":\"https:\\\/\\\/complior.se\\\/en\\\/author\\\/kikki\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"The Importance of Documentation in PCI DSS - Complior","description":"Even the most expensive equipment and sophisticated knowledge in the company isn\u2019t enough to get you through the PCI-DSS compliance process.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/complior.se\/en\/the-importance-of-documentation-in-pci-dss\/","og_locale":"en_GB","og_type":"article","og_title":"The Importance of Documentation in PCI DSS - Complior","og_description":"Even the most expensive equipment and sophisticated knowledge in the company isn\u2019t enough to get you through the PCI-DSS compliance process.","og_url":"https:\/\/complior.se\/en\/the-importance-of-documentation-in-pci-dss\/","og_site_name":"Complior","article_published_time":"2020-08-17T11:55:00+00:00","article_modified_time":"2026-04-14T18:31:09+00:00","og_image":[{"width":1616,"height":749,"url":"https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01.png","type":"image\/png"}],"author":"Kikki Bostrom","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kikki Bostrom","Estimated reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/#article","isPartOf":{"@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/"},"author":{"name":"Kikki Bostrom","@id":"https:\/\/complior.se\/#\/schema\/person\/841f8a57425589a6d7f13c201d345016"},"headline":"The Importance of Documentation in PCI DSS","datePublished":"2020-08-17T11:55:00+00:00","dateModified":"2026-04-14T18:31:09+00:00","mainEntityOfPage":{"@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/"},"wordCount":449,"publisher":{"@id":"https:\/\/complior.se\/#organization"},"image":{"@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/#primaryimage"},"thumbnailUrl":"https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01.png","keywords":["Blog","PCI","PCI DSS"],"articleSection":["Blogg"],"inLanguage":"en-GB"},{"@type":"WebPage","@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/","url":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/","name":"The Importance of Documentation in PCI DSS - Complior","isPartOf":{"@id":"https:\/\/complior.se\/#website"},"primaryImageOfPage":{"@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/#primaryimage"},"image":{"@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/#primaryimage"},"thumbnailUrl":"https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01.png","datePublished":"2020-08-17T11:55:00+00:00","dateModified":"2026-04-14T18:31:09+00:00","description":"Even the most expensive equipment and sophisticated knowledge in the company isn\u2019t enough to get you through the PCI-DSS compliance process.","breadcrumb":{"@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/"]}]},{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/#primaryimage","url":"https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01.png","contentUrl":"https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01.png","width":1616,"height":749,"caption":"cartoon of documents and a folder"},{"@type":"BreadcrumbList","@id":"https:\/\/complior.se\/the-importance-of-documentation-in-pci-dss\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/complior.se\/"},{"@type":"ListItem","position":2,"name":"The Importance of Documentation in PCI DSS"}]},{"@type":"WebSite","@id":"https:\/\/complior.se\/#website","url":"https:\/\/complior.se\/","name":"Complior","description":"Security beyond compliance","publisher":{"@id":"https:\/\/complior.se\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/complior.se\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-GB"},{"@type":"Organization","@id":"https:\/\/complior.se\/#organization","name":"Complior","url":"https:\/\/complior.se\/","logo":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/complior.se\/#\/schema\/logo\/image\/","url":"https:\/\/complior.se\/wp-content\/uploads\/2025\/06\/Complior_logo_dark-scaled.png","contentUrl":"https:\/\/complior.se\/wp-content\/uploads\/2025\/06\/Complior_logo_dark-scaled.png","width":2560,"height":960,"caption":"Complior"},"image":{"@id":"https:\/\/complior.se\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/complior.se\/#\/schema\/person\/841f8a57425589a6d7f13c201d345016","name":"Kikki Bostrom","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/secure.gravatar.com\/avatar\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3a78a33b10cfcbf5a04f53b522f24d176544c6ab014b5174854b6bb92287e13?s=96&d=mm&r=g","caption":"Kikki Bostrom"},"url":"https:\/\/complior.se\/en\/author\/kikki\/"}]}},"uagb_featured_image_src":{"full":["https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01.png",1616,749,false],"thumbnail":["https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01-150x150.png",150,150,true],"medium":["https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01-300x139.png",300,139,true],"medium_large":["https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01-768x356.png",768,356,true],"large":["https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01-1024x475.png",1024,475,true],"1536x1536":["https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01-1536x712.png",1536,712,true],"2048x2048":["https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01.png",1616,749,false],"trp-custom-language-flag":["https:\/\/complior.se\/wp-content\/uploads\/2020\/08\/Documents_featured-01-18x8.png",18,8,true]},"uagb_author_info":{"display_name":"Kikki Bostrom","author_link":"https:\/\/complior.se\/en\/author\/kikki\/"},"uagb_comment_info":0,"uagb_excerpt":"Even the most expensive equipment and sophisticated knowledge in the company isn\u2019t enough to get you through the PCI-DSS compliance process.","_links":{"self":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/posts\/3468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/comments?post=3468"}],"version-history":[{"count":6,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/posts\/3468\/revisions"}],"predecessor-version":[{"id":80479,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/posts\/3468\/revisions\/80479"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/media\/51210"}],"wp:attachment":[{"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/media?parent=3468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/categories?post=3468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/complior.se\/en\/wp-json\/wp\/v2\/tags?post=3468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}