System Component

Also: System Components

PCIComplianceHubLast updated

Any network device, server, computing device, virtual component, cloud component or piece of software that sits within the cardholder data environment or is connected to it. The term matters because PCI DSS requirements apply per system component, so what counts as one directly determines the size and cost of an assessment. Virtual machines, containers, hypervisors, cloud services and serverless functions are all system components, and the inventory of them required by Requirement 12.5.1 is the foundation of accurate scoping.

In PCI DSS v4.0.1. 12.5.1
Sources. PCI DSS v4.0.1, Appendix G: Glossary of Terms, Abbreviations, and Acronyms