Download
1 / 6
60 likes | 75 Views
PCI compliance is a set of twelve requirements that must be met by any organization that processes, stores or transmits credit card data.
E N D
What Is 12 Requirements Of Pci Compliance? PCI compliance is a set of twelve requirements that must be met by any organization that processes, stores or transmits credit card data. The requirements are designed to ensure the security of credit card data and protect it from fraud
The twelve requirements of PCI compliance are: 1. Install and maintain a firewall configuration to protect cardholder data 2. Do not use vendor-supplied defaults for system passwords and other security parameters 3. Protect stored cardholder data 4. Encrypt transmission of cardholder data across open, public networks 5. Use and regularly update anti-virus software
6. Develop and maintain secure systems and applications 7. Restrict access to cardholder data by business need-to-know 8. Assign a unique ID to each person with computer access 9. Restrict physical access to cardholder data 10. Track and monitor all access to network resources and cardholder data 11. Regularly test security systems and processes 12. Maintain a policy that addresses information security for all personnel.
Organizations that process, store or transmit credit card data must meet all twelve of the PCI compliance requirements in order to be considered compliant. Failure to comply with any of the requirements can result in significant fines from credit card companies and/or banks, as well as legal action. In some cases, non-compliant organizations may also be placed on a list of companies that are not allowed to process credit card transactions
PCI compliance is an important part of keeping credit card data safe and protecting it from fraud. Organizations that handle credit card data should take the time to familiarize themselves with the PCI compliance requirements and make sure they are in compliance. Failure to do so could result in severe penalties.
