| The Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted set of policies and procedures intended to optimize the security of credit, debit and cash card transactions and protect cardholders against misuse of their personal information. The standard was created jointly in 2004 by four major credit-card companies: Visa, MasterCard, Discover and American Express. Compliance with the standard has not been consistent. The PCI DSS specifies and elaborates on six major objectives. 1. A secure network must be maintained in which transactions can be conducted. This requirement involves the use of firewalls that are robust enough to be effective without causing undue inconvenience to cardholders or vendors. 2. Cardholder information must be protected wherever it is stored. When cardholder data is transmitted through public networks, that data must be encrypted. 3. Systems should be protected against the activities of malicious hackers by using frequently updated anti-virus software, anti-spyware programs, and other anti-malware solutions. 4. Access to system information and operations should be restricted and controlled. Cardholder data should be protected physically as well as electronically. 5. Networks must be constantly monitored and regularly tested to ensure that all security measures and processes are in place, are functioning properly and are kept up-to-date. 6. A formal information security policy must be defined, maintained and followed at all times, by all participating entities. Enforcement measures include audits and financial penalties for non-compliance. Continue reading about PCI DSS... | 
Posts
No comments:
Post a Comment