Pci Data Security Standard http://www.pcidatasecuritystandard.org Pci Data Security Standard Tue, 07 Feb 2012 18:58:41 +0000 en hourly 1 http://wordpress.org/?v=3.0.3 PCI Data Security Compliance Requirements http://www.pcidatasecuritystandard.org/209/pci-data-security-compliance-requirements.html http://www.pcidatasecuritystandard.org/209/pci-data-security-compliance-requirements.html#comments Tue, 07 Feb 2012 18:58:41 +0000 admin_pcidatasecuritystandard_2819 http://www.pcidatasecuritystandard.org/?p=209 The Payment Card Industry Data Security Standards or the PCI-DSS is a set of regulations that is adopted by companies that store, process or transmit credit card data.  Major financial organizations like VISA, Mastercard, American Express and Discover all have to comply with the set of security standards given by the PCI-DSS.  The PCI Security Standards Council controls the standards, security policies and procedures that establishments must use.  The PCI-DSS compliance pertains to network configuration and segregation, password, encryption, anti-virus policies, and the company’s software development lifecycle.  The standards are broken in to 12 requirements. The first two requirements refer to establishing and keeping a secure network.  It deals with the company’s firewall and network configuration and changing vendor defaults on the software that the company uses.  Requirements three and four deals with protecting encrypted credit card data.  Number three is for encrypting stored data and number four covers the read more...

]]> The Payment Card Industry Data Security Standards or the PCI-DSS is a set of regulations that is adopted by companies that store, process or transmit credit card data.  Major financial organizations like VISA, Mastercard, American Express and Discover all have to comply with the set of security standards given by the PCI-DSS.  The PCI Security Standards Council controls the standards, security policies and procedures that establishments must use.  The PCI-DSS compliance pertains to network configuration and segregation, password, encryption, anti-virus policies, and the company’s software development lifecycle.  The standards are broken in to 12 requirements.

The first two requirements refer to establishing and keeping a secure network.  It deals with the company’s firewall and network configuration and changing vendor defaults on the software that the company uses.  Requirements three and four deals with protecting encrypted credit card data.  Number three is for encrypting stored data and number four covers the encryption of transmitted data, like sending credit card details over secure channels.  Requirement five ensures that all systems that touch credit card data are running on up to date anti-virus software.  Requirement six covers the Software Development Lifecycle, which is the blueprint for credit card management software and systems.  Requirements seven, eight and 9 are concerned with implementing strong access control measures.  Number seven is limiting card holder data access, number 8 deals with the logical access control and limitations, while number nine is concerned with the physical access to the hardware storage of credit card information.  Requirement numbers ten and eleven deal with the regular monitoring and testing of networks.  The last requirement, number 12, is concerned with the implementation of PCI-DSS Security Policy which addresses all of the other requirements of the PCI-DSS.  This deals with an extensive amount of documentation.

The PCI-DSS is implemented for the protection of all cardholders.  Credit card data should always be safeguarded by merchants and establishments.  They should be aware of the different PCI-DSS requirements and do their share to comply with these security standards.

]]> http://www.pcidatasecuritystandard.org/209/pci-data-security-compliance-requirements.html/feed 0 Electronic Banking: PCI Data Security Standards http://www.pcidatasecuritystandard.org/206/electronic-banking-pci-data-security-standards.html http://www.pcidatasecuritystandard.org/206/electronic-banking-pci-data-security-standards.html#comments Thu, 21 Jul 2011 21:56:41 +0000 admin_pcidatasecuritystandard_2819 http://www.pcidatasecuritystandard.org/?p=206 If you’re someone who has business online or accepts credit or debit card payments then you should know what PCI standards mean. Basically, PCI stands for Payment Card Industry which is actually the PCI Data Security Standard (DSS) as officially known today. This standard for electronic payment covers all associates, retailers and providers that operates, holds or transfers cardholder data files. Complying with the said standards provides the main approach to protecting clients’ sensitive data. It involves basic requirements such as security configurations and the use of parameters, encryption of data transferred over public networks, management of malware and virus protection, access and data control etc. Generally, the priority goal remains to be the creation and maintenance of a secure network. What, then, determines standard compliance? Apparently, you will have to submit a report to a compliance validation system that runs in the latest variation of PCI DSS. You must read more...

]]> If you’re someone who has business online or accepts credit or debit card payments then you should know what PCI standards mean. Basically, PCI stands for Payment Card Industry which is actually the PCI Data Security Standard (DSS) as officially known today. This standard for electronic payment covers all associates, retailers and providers that operates, holds or transfers cardholder data files. Complying with the said standards provides the main approach to protecting clients’ sensitive data. It involves basic requirements such as security configurations and the use of parameters, encryption of data transferred over public networks, management of malware and virus protection, access and data control etc. Generally, the priority goal remains to be the creation and maintenance of a secure network.

What, then, determines standard compliance? Apparently, you will have to submit a report to a compliance validation system that runs in the latest variation of PCI DSS. You must fill out the Self-Assessment Questionnaire (SAQ) accurately to be submitted and this report is a form of checklist which the assessor has to review and scrutinized carefully. A helpful validation tool, SAQ is the standard and essential for all merchants. In the event that you have areas or criteria of non-compliance as verified by the assessor, you can essentially work on that to become compliant.

Furthermore, you can now take advantage of the PCI DSS training to advise site owners and other online retailers about this compliance regulations. With no PCI compliance, you as a business owner or as a seller, can’t lawfully accept a plastic card for transaction. In most cases, you may also decide to use the services of a project consultant who is trained for PCI-DSS and can help with the whole process or you can ask for some help from Qualified Service Assessors (QSAs) in the business. Overall, this standard serves as a good reference point for many people to use.

]]> http://www.pcidatasecuritystandard.org/206/electronic-banking-pci-data-security-standards.html/feed 0