PCI DSS

Name
PCI DSS
Publisher
PCI Security Standards Council
Type
Industry standard
What it is

Security requirements for organizations that store, process or transmit payment card data.

Key points
  • Requirements for networks, data protection, access control, monitoring and testing
  • Scope covers systems that store, process or transmit card data
On the exam

Contractual compliance obligations; tokenization reduces scope.

More from Standards & Frameworks