What is PCI There are 12 requirements, grouped into six categories for PCI Compliance: Build and Maintain a Secure Network (req. 1 & 2)
{"Image DocumentName": "What is PCI?There are 12 requirements, grouped into six categories for PCI Compliance: Build and Maintain a Secure Network (req. 1 & 2)", "Image ImageDescription": "Protect Cardholder Data (req. 3 & 4) Maintain a Vulnerability Program (req. 5 & 6) Implement Strong Access Control Measures (req. 7,8 & 9) Regularly Monitor and Test Networks (req. 10 & 11) Maintain a Policy that addresses Information Security (req. 12) (Tim) PCI DSS \u2013 the standards themselves, have 6 BROAD CATEGORIES, Which include 12 specific requirements. And within those requirements there are approximately 250 items that you have to meet. \u2013 every merchant has to work through some or all of these items depending on the type and LEVEL of merchant you are (we\u2019ll talk about that in a minute) These requirements are very broad in spectrum and cover off items from the actual physical security of a piece of paper with a credit card number on it\u2026.to very technical requirements such as intrusion protection and anti-virus programs. ________________________________________________________________________________. Build and Maintain a Secure Network. 1. Install and maintain a firewall configuration to protect data. 2. Do not use vendor-supplied defaults for system passwords and other security parameters. Protect Cardholder Data. 3. Protect stored cardholder data \u2013 i.e. from the ecommerce transmission of data to receiving a number via fax and where it\u2019s stored. 4. Encrypt transmission of cardholder data across open, public networks. Maintain a Vulnerability Program (relates more to ecommerce \u2013 i.e. intrusion protection and detection) 5. Use and regularly update anti-virus software or programs. 6. Develop and maintain secure systems and applications. Implement Strong Access Control Measures. 7. Restrict access to cardholder data by business need-to-know. 8. Assign a unique ID to each person with computer access. 9. Restrict physical access to cardholder data. Regularly Monitor and Test Networks. 10. Track and monitor all access to network resources and cardholder data. 11. Regularly test security systems and processes. Maintain a Policy that addresses Information Security. 12. Maintain a policy that addresses information security for employees and contractors. \u2013 not just writing it and having it but making sure people are actually following it \u2013 one of our biggest challenges.", "Image XResolution": "37", "Image YResolution": "37", "Image ResolutionUnit": "Pixels/Centimeter", "Image Software": "SlidePlayer", "Image YCbCrPositioning": "Centered"}