Peer case
The PAN left the shared drive
How and who for the hotel job—verified when attested.
Job: Keep card data out of inboxes and spreadsheets
PANs in mail/sheets
Verified0 / 30 days
Owner-signed diagram
Verifiedyes
Claim
Card flow the GM can draw.
Evidence
Mailbox sample, shared-drive search, signed diagram.
Caveat
A new terminal nobody uses is theater. Training was the expensive part.
Situation
Group deposits still arrived as card photos in a shared mailbox. The night-audit workbook had a hidden column. The franchise scan was green.
Approach
Vault Lane traced the workaround first. Folio Security drew a one-page scope the owner signed. The mailbox path died. Folio Watch alerts; nobody auto-fixes a folio.
Outcome
Zero PANs in mail or sheets on a 30-day sample. SAQ scope shrank. The closer uses the token terminal when the primary is down.
“They asked the night audit what happens when the terminal dies. That is where the card actually lived.”
Who did the work
- 8.6
- 8.7
- 8.4