Resources for Federal Financial Institutions Examination Council (FFIEC)

PCI Compliance, the 12 Step Program

www.networkworld.com

If your company stores, processes, or transmits the primary account number on a credit card then you are required to meet, or exceed, the data security standards set forth in the PCI security standards. These security requirements apply to all network components that forward or have access to card holder data. This would include switches, routers, firewalls, IPS, Servers, workstations, wireless, storage, etc. So basically, if the device is IP (Internet Protocol) reachable to cardholder data then it is in scope for the PCI requirements.

View the Resource

Share or bookmarklet this web page at: