Compliance
PCI Compliance
Compliance
What is PCI DSS Compliance?
PCI compliance, or payment card industry compliance, refers to a set of 12 security standards that organizations must adhere to to keep customer payment card data secure.
PCI compliance or PCI DSS (payment card industry data security standard) is mandated by credit card companies in an effort to ensure the security of credit card transactions.
Who needs PCI DSS Compliance?
Any company that accepts, transmits, or stores private data of cardholders needs to be PCI compliant.
Is PCI DSS Compliance required by law?
PCI DSS is not a law. PCI DSS is a security standard. Compliance is mandated by contracts that a merchant signs with major credit card brands such as Mastercard and Visa. Merchants who want to accept a credit card brand are required by the brand to demonstrate PCI DSS compliance.
What are the 12 requirements of PCI DSS Compliance?
In order to comply with PCI standards and guidelines, there are 12 steps that must be followed. The following steps are considered to be security best practices.
- Implement firewalls to protect customer data
- Have appropriate password protection in place, such as 2FA
- Protect cardholder data
- Encrypt the transmission of cardholder data
- Use anti-malware and antivirus software
- Update software and maintain security systems
- Restrict employee access to cardholder data
- Assign unique user login ids to those who have access to cardholder data
- Restrict physical access to data storage
- Create and monitor access logs
- Test security systems on a regular basis
- Create a policy that is documented and can be followed
Want to learn how cybersecurity asset management can help ensure PCI DSS compliance? Check out this report.
See the Platform
See the Axonius Platform for yourself with an interactive product tour, where we'll guide you through key applications of our Cybersecurity Asset Management and SaaS Management solutions.
Get a Free Trial
Sign-up for a free full-access 30 day trial to learn how Axonius gives IT and security teams a comprehensive understanding of all assets, their relationships, and business-level context including devices, identities, software, SaaS applications, vulnerabilities and security controls, and more.
Book a Demo
Request a demo to learn how the Axonius Platform provides a system of record for all digital infrastructure helping IT and security teams manage an always-expanding sprawl of devices, users, software, SaaS applications, cloud services, and the tools used to manage and secure them.