As our generation advances, so do our means of meeting our basic needs. One is how we purchase items, whether it be from a store or online. The majority of consumers pay with credit cards or electronic funds transfers.
Credit card companies enforce the Payment Card Industry Data Security Standard (PCI DSS) to ensure retailers receive, store, and transfer cardholder information securely. This is done with the assistance of the Payment Card Industry Security Standards Council (PCI SSC).
The Payment Card Industry Data Security Standard (PCI DSS) is a security protocol for handling credit cards from well-known card companies. The Payment Card Industry Security Standards Council is responsible for overseeing the standard, and the card companies have made adoption of it mandatory. The standard was developed to improve data security for cardholders and lower credit card fraud.
The twelve requirements under PCI DSS are as follows
1. To secure cardholder data, configure and maintain a firewall.
2. Never use the system password defaults or any security settings provided by the vendor.
3. Keep cardholder data secure.
4. Transmit cardholder data across open, public networks using encryption.
5. Update anti-virus software and safeguard all systems from malware.
6. Create and manage secure apps and systems.
7. Limit who has access to cardholder data based on business requirements.
8. Determine and verify who has access to system components.
9. Limit who has access to cardholder data physically.
10. Keep track of and keep an eye on all network resource and cardholder data access.
11. Test security procedures and systems on a regular basis.
12. Maintain a policy for information security that covers it for all employees.
You can use the helpful links provided to learn more about PCI DSS.
What are the 12 requirements of PCI DSS Compliance?
Additional tips on securing the privacy of your credit card can be found in the link below.
Things To Do When Your Credit Card Gets Compromised