Definition

PCI DSS 12 requirements

PCI DSS 12 requirements is a set of security controls that businesses are required to implement to protect credit card data and comply with the Payment Card Industry Data Security Standard (PCI DSS). The requirements were developed and are maintained by the Payment Card Industry (PCI) Security Standards Council

Any organization that handles payment cards, including debit and credit cards, must meet the 12 requirements directly or through a compensating control. However, compensating controls are not always allowed and must be approved on a case-by-case basis by a PCI QSA. Failure to meet the PCI DSS 12 requirements may result in fines or termination of credit card processing privileges.

The PCI DSS 12 requirements are as follows:

1. Install and maintain a firewall configuration to protect cardholder data.

2. Do not use vendor-supplied defaults for system passwords and other security parameters.

3. Protect stored cardholder data

4. Encrypt transmission of cardholder data across open, public networks.

5. Use and regularly update antivirus software

6. Develop and maintain secure systems and applications.

7. Restrict access to cardholder data by business need-to-know

8. Assign a unique ID to each person with computer access. 

9. Restrict physical access to cardholder data.

10. Track and monitor all access to network resources and cardholder data. 

11. Regularly test security systems and processes.

12. Maintain a policy that addresses information security.

Contributor(s): Maggie Sullivan
This was last updated in April 2012
Posted by: Margaret Rouse

Email Alerts

Register now to receive SearchSecurity.com-related news, tips and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

More News and Tutorials

Do you have something to add to this definition? Let us know.

Send your comments to techterms@whatis.com

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: