subject: How to Meet PCI Regulations [print this page] How to Meet PCI Regulations How to Meet PCI Regulations
PCI DSS is a set of strict requirements for protecting payment account data and was developed by the PCI Security Standards Council to enhance the security levels on an international level. This standard that has been implemented is designed to help organizations protect customer's private information. These standards make it safe information to be stored within networks but, also only be accessed by the appropriate people.
A list of the principles and requirements include:
Building a Secure Network
Prerequisite #1 Create and uphold firewall to secure personal information
Prerequisite #2 Do NOT use defaults and passwords supplied by vendors
Protect Customers Data
Prerequisite #3 Secure cardholders data
Prerequisite #4 Supply encrypted transmissions with cardholder's data
Maintain Program
Prerequisite #5 Update anti-virus regularly
Prerequisite #6 Maintain secure systems and applications
Enforce Strong Access Control Measures
Prerequisite#7 Restrict access to cardholder data by business need-to-know
Prerequisite #8 Delegate an exclusive ID for persons with computer access
Prerequisite #9 Limit physical access to cardholder data
Test and Monitor Networks Often
Prerequisite #10 Track and monitor all access to network resources and cardholder data
Prerequisite #11 Test security systems and processes regularly
Maintain an Information Security Policy
Prerequisite #12 Maintain a policy that addresses information security
Businesses are required by law to implement these regulations or can face severe trouble. For more information on these regulations and to ask any questions it is advised to visit www.PCIHIPAA.com. The PCI Security Standards Council manages a global training and certificate program and provides additional resources on their website. Avoid large fines and keep your cardholders information from getting into the wrong hands by becoming PCI compliant.
