What is PCI DSS?

Lots of merchants are asking their processors as what is PCI DSS, simply put it is Payment Card Industry Data Security Standard. This was developed by the card issuing companies as a guideline to help organizations that process credit card payments to prevent fraud, hacking and other various security threats.

Mechants that process, store or transmit payment card data must be compliant with PCI DSS or they risk losing the ability to accept cards or they will be fined and possibly audited.

Basic Requirements

• Build and Maintain a Secure Network
• Install and maintain a FIREWALL to protect cardholder data
• Do not use the Pass Words supplied by vendors

Protect Cardholder Data

• Protect stored cardholder data
• ENCRYPT transmission of cardholder data across open and public networks

Maintain a Vulnerability Management Program

• Use and regularly update your ANTI-VIRUS SOFTWARE
• Develop and maintain secure systems and applications

Implement Strong Access Control Measures

• Assign different ID's to each individual with access to your computers and networks
• Restrict access to cardholder data

Monitor and Test Networks
Do this regularly and test security systems and monitor access to your network