PCI DSS
PCI DSS (Payment Card Industry Data Security Standard) is a worldwide information security standard assembled by the Payment Card Industry Security Standards Council (PCI SSC).
The standard was created to help organizations that process credit card payments prevent credit card fraud through increased controls around data and its exposure to compromise.
The latest version of PCI DSS 1.2.1 released in July 2009 consists of 12 requirements and security assessment procedures:
- Install and maintain a firewall configuration to protect cardholder data
- Do not use vendor-supplied defaults for system passwords and other security parameters
- Protect stored cardholder data
- Encrypt transmission of cardholder data across open, public networks
- Use and regularly update anti-virus software or programs
- Develop and maintain secure systems and applications
- Restrict access to cardholder data by business need to know
- Assign a unique ID to each person with computer access
- Restrict physical access to cardholder data
- Track and monitor all access to network resources and cardholder data
- Regularly test security systems and processes
- Maintain a policy that addresses information security for employees and contractors
More information on PCI DSS can be found on the PCI Security Standards Council.
