PCI DSS

The Payment Card Industry Data Security Standard (PCI DSS) applies to any organization that stores, processes, or transmits cardholder data.

Key Requirements

  1. Maintain a secure network
  2. Protect cardholder data
  3. Maintain a vulnerability management program
  4. Implement strong access control measures
  5. Regularly monitor and test networks
  6. Maintain an information security policy

Web Security Implications

  • Never store full card numbers unless necessary
  • Use tokenization for payment processing
  • Encrypt transmission of card data
  • Implement strong authentication