CORE PAYMENT CARD INDUSTRY DSS PRINCIPLES AND REQUIREMENTS

Build and Maintain a Secure Network

• Requirement 1: Install and maintain a firewall configuration to
  protect cardholder data
• Requirement 2: Do not use vendor-supplied defaults for system
  passwords and other security parameters

Protect Cardholder Data

• Requirement 3: Protect stored cardholder data
• Requirement 4: Encrypt transmission of cardholder data across open,
  public networks

Maintain a Vulnerability Management Program

• Requirement 5: Use and regularly update anti-virus software
• Requirement 6: Develop and maintain secure systems and applications

Implement Strong Access Control Measures

• Requirement 7: Restrict access to cardholder data by business need-to-know
• Requirement 8: Assign a unique ID to each person with computer access
• Requirement 9: Restrict physical access to cardholder data

Regularly Monitor and Test Networks

• Requirement 10: Track and monitor all access to network resources
  and cardholder data
• Requirement 11: Regularly test security systems and processes

Maintain an Information Security Policy

• Requirement 12: Maintain a policy that addresses information security

If you require assistance to meet the PCI required standards please do not hesitate to contact us: pci@supportspread.co.uk