Requirement 12.7

Screen potential employees (see definition of “employee” at 9.2 above) prior to hire to minimize the risk of attacks from internal sources.

For those employees such as store cashiers who only have access to one card number at a time when facilitating a transaction, this requirement is a recommendation only.