White Papers

The Prioritized Approach to Pursue PCI DSS Compliance

Overview The Payment Card Industry Data Security Standard (PCI DSS) provides a detailed, 12 requirements structure for securing cardholder data that is stored, processed and/or transmitted by merchants and other organizations. By its comprehensive nature, the standard provides a large amount of information about security - so much that some people who are responsible for cardholder data security may wonder where to start the continuous journey of compliance. Toward this end, the PCI Security Standards Council provides the following Prioritized Approach to help stakeholders understand where they can act to reduce risk earlier in the compliance process.

Download White Paper

By downloading you agree to our Terms and Conditions. These include information regarding use of your personal data.

Please disable any pop-up blocking software before downloading.

Publisher
PCI Security Standards Council
File Format
PDF
Date Published
Feb 1, 2009
Format
White Papers
Topics
Data Recovery - Security, Security Standards, Security Management

Similiar White Papers

Demystifying the PCI Data Security Standard for Merchants

Demystifying the PCI Data Security Standard for Merchants

The Payment Card Industry Data Security Standard (PCI DSS) is a set of security practices set forth by American Express,

Publisher: ComplyGuard Networks  |  Tags: data, data security, pci, pci dss

PCI Policy Compliance Using Information Security Policies Made Easy

PCI Policy Compliance Using Information Security Policies Made Easy

Many organizations are building or updating written information security policies in response to the newly updated Payme

Publisher: Information Shield  |  Tags: information security, pci, security policy

Improving IT Compliance: Guidance for Midsize Organizations

Improving IT Compliance: Guidance for Midsize Organizations

The results are in on the compliance efforts of companies boasting annual revenues of $50 to $999 million, and there's d

Publisher: Symantec  |  Tags: hr, revenues, sarbanes-oxley, sec

Tripwire PCI DSS Solutions: Automated, Continuous Compliance

Tripwire PCI DSS Solutions: Automated, Continuous Compliance

The credit card industry has stepped up its pressure for banks, merchants and other service providers to increase data s

Publisher: Tripwire  |  Tags: data, data security, pci, pci dss

Endpoint Security for Protecting Data on Mobile Computers

Endpoint Security for Protecting Data on Mobile Computers

Laptop computers and mobile devices have caused major data security issues in recent years. For IT departments, encrypti

Publisher: Absolute Software  |  Tags: computers, data, data security, mobile devices, real-time

PCI Security Standards Council White Papers

Payment Card Industry (PCI) Data Security Standard: Security Assessment Procedures

Payment Card Industry (PCI) Data Security Standard: Security Assessment Procedures

The payment card industry (PCI) denotes the debit, credit, pre-paid, e-purse, ATM, and POS cards and associated business

Publisher: PCI Security Standards Council  |  Tags: atm, pci, pci dss, pos

Getting Started With PCI Data Security Standard

Getting Started With PCI Data Security Standard

PCI security for merchants and payment card processors is the vital byproduct of applying information security best prac

Publisher: PCI Security Standards Council  |  Tags: data, information security, pci, pci dss

Payment Card Industry (PCI) Data Security Standard: Navigating PCI DSS

Payment Card Industry (PCI) Data Security Standard: Navigating PCI DSS

This paper describes the 12 Payment Card Industry Data Security Standard (PCI DSS) requirements, along with guidance to

Publisher: PCI Security Standards Council  |  Tags: applications, authentication, data, network, pci, pci dss

Lifecycle Process for Changes to PCI DSS

Lifecycle Process for Changes to PCI DSS

The Payment Card Industry Data Security Standard (PCI DSS) secures cardholder data that is stored, processed or transmit

Publisher: PCI Security Standards Council  |  Tags: data, developers, pci, pci dss, software

Information Supplement: Requirement 6.6 Code Reviews and Application Firewalls Clarified

Information Supplement: Requirement 6.6 Code Reviews and Application Firewalls Clarified

The intent of Requirement 6.6 is to ensure web applications exposed to the public Internet are protected against the mos

Publisher: PCI Security Standards Council  |  Tags: applications, pci, source code