Identify all instances where primary account numbers (PAN) is displayed.
Identify the document that:
i. Requires PAN is masked when displayed, except for those with a legitimate business need to see full PAN.
ii. Identifies those with a legitimate business need to see full PAN
For all instances where PAN is displayed, describe how PAN was observed to be masked, except where there is a legitimate business need to view the full PAN.