ARE YOU FOLLOWING THESE REQUIREMENTS?

Listed below are the twelve requirements for PCI DSS Compliance. For more information on achieving PCI DSS Compliance, contact Tina Louise Penn

BUILD AND MAINTAIN A SECURE NETWORK

• Requirement 1: Maintain a firewall configuration to protect cardholder data
• Requirement 2: Do not use vendor-supplied defaults for system passwords and other security parameters

PROTECT CARDHOLDER DATA

• Requirement 3: Protect stored cardholder data
• Requirement 4: Encrypt transmission of cardholder data across open, public networks

MAINTAIN A VULNERABILITY MANAGEMENT PROGRAM

• Requirement 5: Use and regularly update anti-virus software
• Requirement 6: Develop and maintain secure systems and applications

IMPLEMENT STRONG ACCESS CONTROL MEASURES

• Requirement 7: Restrict access to cardholder data by business need-to-know
• Requirement 8: Assign a unique ID to each person with computer access
• Requirement 9: Restrict physical access to cardholder data

REGULARLY MONITOR AND TEST NETWORKS

• Requirement 10: Track and monitor all access to network resources and cardholder data
• Requirement 11: Regularly test security systems and processes

MAINTAIN AN INFORMATION SECURITY POLICY

• Requirement 12: Maintain a policy that addresses information security