White Papers for Federal Financial Institutions Examination Council (FFIEC)

Payment Card Industry Data Security Standard and the Need for Software Risk Analysis

Ounce Labs

Organizations that process significant amounts of customer cardholder data are now required to
assess their software, especially web-facing applications, for security vulnerabilities. In the wake of high-profile
identity theft and fraud concerns, American Express, Discover Financial Services, JCB, MasterCard Worldwide and
VISA International have formed the PCI Security Standards Council, charged with managing data-protection
requirements for companies that manage credit card information. These guidelines, the Payment Card Industry Data Security Standard (PCI DSS), lists twelve requirements that apply to “all Members, merchants, and service providers that store, process, or transmit cardholder data.”

View the White Paper

Share or bookmarklet this web page at: