Friday 20 December 2013

PCI Security Standards




Payment Card Industry securitystandard was created to maintain the data of the cardholder (debit, credit, ATM and Pos cards) and also to increase its security standard and to reduce the card frauds via its exposure.
Objectives of PCI Security Standards are
1.       To build and maintain a secure network via installing a firewall configuration to protect cardholder data and not to use cardholder data for password purpose or any other purpose.
2.       Protect cardholder data:  to secure cardholder’s data and to encrypt the transmission of cardholder data in open and public networks.
3.       Maintain a vulnerability management program: update regularly antivirus software and secure the system from getting affected by the malware.
4.       Implement strong access control measures:  assigning cardholder a unique ID via computer system to maintain the records.  Also restricting the physical access to cardholder data.
5.       Regularly monitoring and testing networks:  regularly test the system and networks and preventing it from virus and malware activities. Also tracking and monitor all the access to the network resources and cardholder data.
6.       Maintain a Information Security strategy: Maintain a policy or strategy that implies security information.

For original source click here

No comments:

Post a Comment