Digital fraud & identity theft have made the protection of payment card info more critical than ever

Published by ArcSight on Sep 19, 2008

The Payment Card Industry (PCI) Data Security Standard (DSS) is comprised of a list of twelve requirements to which members, merchants and service providers must adhere. It applies to any organization that stores, processes or transmits cardholder data. The requirements include the use of data encryption, end-user access controls and activity monitoring and logging, as well as the need to regularly test security systems and processes. Companies face stiff fines or even may be barred from the card acceptance program if they do not comply. The following whitepaper will discuss the twelve PCI DSS requirements and describe the technology necessary to address PCI DSS 1.2.