Compliance Glossary

PCI DSS rules are global security standards for any organization dealing with cardholder data to reduce security incidents, information theft, and data breaches in the payment industry. 

Here are the 12 PCI compliance requirements or rules you need to know:

• Install and maintain a firewall to secure network connections
• Change default passwords and security settings provided by vendors
• Protect stored cardholder data with policies for data disposal
• Encrypt cardholder data when transmitting it over public networks
• Use and keep antivirus software updated
• Develop security systems and processes to address vulnerabilities
• Restrict access to cardholder data based on roles and privileges
• Assign user IDs for computer access and implement authentication measures
• Restrict physical access to cardholder data with monitoring tools
• Track and monitor network and data access, maintaining audit trails
• Regularly test systems and processes, including wireless access points
• Have an information security policy outlining technology usage rules and responsibilities