What is PCI DSS? | A Brief Summary of the Standard

What is the PCI DSS? A summary of the PCI DSS (Payment Card Industry Data Security Standard). Learn about the PCI DSS and how to comply with the standard.

----------------------------------------------------------------------------------------------------------------

Connect with us on social:

Or keep up to date with our blog:

[Vistainfosecofficial]

That was a superb explanation for anyone who is looking to learn what PCI DSS actually is

[okeyokafor]

THE 12 REQUIREMENTS OF PCI DSS
The requirements set forth by the PCI SSC are both operational and technical, and the core focus of these rules is always to protect cardholder data.
The 12 requirements of PCI DSS are:
1. Install and maintain a firewall configuration to protect cardholder data
2. Do not use vendor-supplied defaults for system passwords and other security parameters
3. Protect stored cardholder data
4. Encrypt transmission of cardholder data across open, public networks
5. Use and regularly update anti-virus software or programs
6. Develop and maintain secure systems and applications
7. Restrict access to cardholder data by business need to know
8. Assign a unique ID to each person with computer access
9. Restrict physical access to cardholder data
10. Track and monitor all access to network resources and cardholder data
11. Regularly test security systems and processes
12. Maintain a policy that addresses information security for all personnel

[arshadmalik]

That's a really useful top-level overview of PCI DSS standard. Many thanks

[UKjaydee]

Thank you. This was a helpful quick summary of PCI DSS. Awesome

[akulaharichandnarau]

Good basic info on PCIDSS. Content is good .

[truthwsyf]

Throw lots of buzz words and make it sound complicated to create an industry... It is essentially simply a requirement of "end to end encryption" of any payment data and keeping the data secure both at rest or while in flight (read while in transmission). Most companies just want to not be bothered and want someone else to take the risk so they can have "one throat to choke" in case of any non-compliance....

[ea]

This is why cryptocurrencies should be mainstream. These payment merchants have these standards just for their benefit. VISA was hacked too.

[eddieb]

Does one business pay just one PCI fee per month or are you charged for each number of card machines you have? For example if you have 2x card machines will you pay the compliance fee twice

[Dennis-xict]

Hi dears I need your help could you help me please 🙏🏽?Question 1
🔹The PIS DSS is established by:
🔹United Nations Organisation
🔹A group of payment card companies
🔹European Union

[skysffkingdom]

We are fully compliant with Payment Card Industry Data Security Standards. (When I'm adding a card for payment above👆🏼 lines appearing, why? and how to resolve this issue? Pleas help me

[lohphat]

Background music is too loud and distracting. I'm watching this to be educated, not entertained.

[humairashaikh]

I pay online fees last night there is message of your order is awaited why it's not paid ?