Complying with the Payment Card Industry Data Security Standards (PCI-DSS)

Complying with the Payment Card Industry Data Security Standards (PCI-DSS)

Any company that stores, processes or transmits credit card data must comply with the PCI-DSS. The major credit card brands of Visa, Mastercard, Discover and American Express aligned their individual policy protection programs to create the PCI DSS, an industry wide framework for protecting consumers.

Below are some key aspects to becoming compliant with the PCI-DSS:

• Install and maintain a firewall


• Do not use vendor-supplied defaults for passwords.


• Develop configuration standards.


• Protect stored data


• Encrypt transmission of cardholder data across public networks


• Use and regularly update anti-virus software


• Develop and maintain secure systems and applications


• Restrict access to data by business need-to-know


• Assign a unique ID to each person with computer access


• Restrict physical access to cardholder data


• Track and monitor all access to network resources and cardholder data


• Systems should be tested to ensure security is maintained over time and through changes


• Maintain an information security policy

For more information on security compliance click here...