CMP-2458: Requirement 6.5 is not applicable

controls/pcidss_4_ocp4.yml

@@ -1705,14 +1705,14 @@ controls:
     title: Changes to all system components are managed securely.
     levels:
       - base
-    status: pending
+    status: not applicable
     controls:
     - id: 6.5.1
       title: Changes to all system components in the production environment are made according to
         established procedures.
       levels:
         - base
-      status: pending
+      status: not applicable
 
     - id: 6.5.2
       title: Upon completion of a significant change, all applicable PCI DSS requirements are
@@ -1725,7 +1725,7 @@ controls:
         12.5.2.
       levels:
         - base
-      status: pending
+      status: not applicable
 
     - id: 6.5.3
       title: Pre-production environments are separated from production environments and the
@@ -1735,7 +1735,7 @@ controls:
         environments.
       levels:
         - base
-      status: pending
+      status: not applicable
 
     - id: 6.5.4
       title: Roles and functions are separated between production and pre-production environments
@@ -1751,7 +1751,7 @@ controls:
         access to the production environment.
       levels:
         - base
-      status: pending
+      status: not applicable
 
     - id: 6.5.5
       title: Live PANs are not used in pre-production environments, except where those
@@ -1761,7 +1761,7 @@ controls:
         Live PANs cannot be present in pre-production environments outside the CDE.s
       levels:
         - base
-      status: pending
+      status: not applicable
 
     - id: 6.5.6
       title: Test data and test accounts are removed from system components before the system goes
@@ -1770,7 +1770,7 @@ controls:
         Test data and test accounts cannot exist in production environments.
       levels:
         - base
-      status: pending
+      status: not applicable
 
   - id: '7.1'
     title: Processes and mechanisms for restricting access to system components and cardholder