10: Software Update Information

Control objective 10.1

Upon release of any software updates, a summary of the specific changes made to the software is provided to stakeholders.

A process to include Release Notes for all patches or upgrades is established. The Release Notes and the version number are publicly available on the IBM® Support Portal. If a patch for a PCI DSS certified release is delivered, a vendor change document is created. The document describes the impact of all changes according to PCI DSS compliance and why it was necessary. The vendor change analysis document can be requested from your account manager.