PCI, also known as PCI DSS which stands for Payment Card Industry Data Security Standard, is an industry that runs the standards and the measures of security of businesses that transmit, store, process, and accept credit card information. Organizations that are PCI Compliant don't get much data breaches, which lead to exposure of cardholder data. If you own a business and it deals with credit card payments then you are required to meet the PCI DSS standards. You can become PCI compliant by asking your card brand to lead you through the process.
The PCI Security Standards Council is a group that studies the uprising PCI security issues and hence develops programs and standards to get hold of the reliability of payment card system.
Categories of PCI compliance
PCI Compliance is divided into six main categories:
· Access Control
· Data Protection
· Monitoring
· Secure Network
· Security Policy
· Vulnerability Management
Access Control
Put Access Control into practice. Limit the password access to your system, every employee should only have access to the password he needs for his job only. Explain them that it is best for both customers and employees. If your business gets breached then investigating the matter will be easy due to restricted access to network.
Data Protection
Keep the data protected and save the physical records of customer and cardholder information, either by a physical lock and key or a card system. If your business includes manual processing of credit card then limit the access to receipts and slips by locking up them safely. If the data is stored in your network then it should be encoded and kept behind the company's firewall.
Monitoring
Monitor your network by providing each terminal and user a unique ID number. This way in times of a breach IT professionals will find it easy to know from where the attack took place.
Secure Network
Create a secure network by keeping your firewalls updated and working. Under no circumstances let your firewalls go down and don't give employees permission to disable firewalls for any reason.
Security Policy
Make a security policy by changing the passwords every now and then. As soon as the passwords are given by vendor change them immediately. Apply same password change policy on your employees. Change your passwords on a regular basis as instructed by the vendor.
Vulnerability Management Program
Develop a vulnerability management program by keeping your system protected with the correct anti-virus software. Also prohibit the addition of software like games that might compromise the system.
Penalties for PCI DSS Violations
It is better to understand that what might happen if PCI DSS requirements are violated. A business that is not PCI Compliant is most likely to pay fines, sanction and is likely to end up losing his rights from processing credit card information. If being non compliant results in data loss; then the business is likely to pay higher fines and some additional huge fines from the credit card brands and banks. Businesses not being PCI Compliant might subject to lawsuits and governmental actions for not being able to protect customer data.
https://oag.treasury.gov.za/RMF/Lists/Framework%20Feedback/DispForm.aspx?ID=5239http://gdsr.gov.vn/noidung/hoidap/Lists/DanhSachCauHoi/DispForm.aspx?ID=2692
https://www.tourism.gov.za/Lists/Site%20Feedback/DispForm.aspx?ID=5317
http://www.seg.guanajuato.gob.mx/Ceducativa/Lists/DudasPagoFed/DispForm.aspx?ID=65974
http://www.kzntreasury.gov.za/Lists/FRAUD%20RISK%20ASSESSMENT%20QUESTIONNAIRE/DispForm.aspx?ID=14907
https://www.customs.gov.vn/Lists/InterviewThreads/DispForm.aspx?ID=2960
https://www2.anm.gov.my/Lists/Soal%20Selidik%20Perakaunan%20Akruan/DispForm.aspx?ID=4219
http://disperindag.depok.go.id/forum/index.php?threads/certified-translation-for-your-personal-documents.11829/
http://adfs01.sthgrampians.vic.gov.au/mediawiki/index.php/User:Ellorock
http://ogp.pr.gov/lists/prueba%20survey/DispForm.aspx?ID=1475
http://gdsr.mof.gov.vn/noidung/hoidap/Lists/DanhSachCauHoi/DispForm.aspx?ID=2701
https://www.ecda.gov.sg/growatbeanstalk/Lists/Rate%20This%20Website/DispForm.aspx?ID=2707
https://www.gov.bn/Lists/eDarussalam%20Survey/DispForm.aspx?ID=62685
http://www.bansefi.gob.mx/Lists/Encuesta/DispForm.aspx?ID=1893
https://www.fic.gov.za/ContactUs/Lists/Media%20Queries/DispForm.aspx?ID=315
https://chalmers.in.gov/forums/users/ellorock/
https://mainecare.maine.gov/Lists/Quarterly%20Dental%20Provider%20Survey/DispForm.aspx?ID=3851
http://gisdata.scag.ca.gov/Lists/AccessRequests/DispForm.aspx?ID=9924
No comments:
Post a Comment