Payment Card Industry Data Security Standard
- Requires the building and maintenance of a secure network
- Demands protection of cardholder data
- Requires the maintenance of a vulnerability management program
- Demands the implementation of strong access control measures
- Requires regular monitoring and testing of networks
- Demands the maintenance of an information security policy
The Payment Card Industry Data Security Standard (PCI DSS) is the guideline created through the comprehensive collection of Visa International, Discover Financial Services, American Express, JCB, and MasterCard Worldwide standards regarding proactive protection of customer account data. The guideline defines the level of security regulations that any merchant or service provider must comply with in order not to risk losing the ability to process credit card payments. PCI DSS demands that any company processing, storing or transmitting cardholder data or credit card numbers maintain minimum levels of security. The compliance of merchants or service providers must be validated via an audit by a PCI DSS Qualified Security Assessor Company.
|
