White Papers for Federal Financial Institutions Examination Council (FFIEC)

Challenges and Oppurtunities Of PCI

Tripwire

The greatest risk to credit card data is constantly evolving exploits that target both technical and administrative vulnerabilities in information systems. The Payment Card Industry Data Security Standard (PCI DSS) addresses those vulnerabilities, specifically those affecting sensitive cardholder data, and sets forth requirements companies must meet to minimize the impact of those vulnerabilities
on security. The PCI standard requires continuous validation of security efforts, so companies complying
with PCI DSS can’t simply implement solutions and then forget about them.

Experience has shown that PCI DSS compliance is most successful when it’s coordinated with corporate business processes. Integrating the DSS with corporate security standards ensures that security controls are rigorously enforced and remain consistent with PCI requirements. Such coordination also contributes to more cost-effective auditing, a stronger enterprise security profile, and a more streamlined and reliable IT infrastructure that can deliver better service while incurring less risk.

View the White Paper

Share or bookmarklet this web page at: