input: [Requirement] PCI DSS Requirement 3.2 [Proposed Change] Recognize that issuers have a legitimate business need to store Sensitive Authentication Data. [Assessment Impact] 
output: The scope of an issuer's business requirements has little bearing on an assessment at a merchant or service provider. Minimal impact to assessment effort.