PCI DSS Compliance

What is the PCI DSS Security Standards?

The Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards formed in 2004 by leading credit card organizations like Visa, Mastercard and American Express. Governed by the Payment Card Industry Security Standards Council (PCI SSC), the compliance guidelines aim to secure credit and debit card transactions against data theft and fraud.

Get a free quote

cybersecurity and cyber hygiene hitachi systems security

PCI DSS Security Standards

Simply, these security requirements apply to companies that process, transmit or store payment card information. The standard is intended to help organizations protect customer account data and reflects most of the usual best practices for securing sensitive information.

They include requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. Merchants and service providers transacting, storing, or handling payment card account information must comply with the 12 security principles defined in the PCI DSS. These 12 principles are grouped into the following six main goals:

Build and maintain a secure network

Protect cardholder data

Maintain a vulnerability management program

Implement strong access control measures

Regularly monitor and test networks

Maintain an information security policy

Customer Needs

The requirements supporting the objectives force organizations to manage, govern and integrate different departments within the organization, including IT, security, compliance, risk, and incident response. Employees tasked with managing PCI DSS compliance understand the time commitment and effort to effectively achieve the six goals.

Get a Quote

Specifically, organizations are required to meet requirements:

Collect event traffic from network security devices.
Normalize event traffic to a standard format.
Correlate to identify abnormal behavior patterns, threats, attacks, and data loss.
Analyze threat events to determine impact and priority.
Priority event escalation
Many organizations do not have the expertise and time to comply with PCI DSS. However, the penalties are significant - any business or retailer that handles credit card information is required to be compliant with the PCI standards, and the penalties for non-compliance are severe. Further, cybersecurity insurance and other insurance products may become unavailable or at an increased premium if PCI DSS compliance is not validated.

The Benefits of Hitachi Systems Security PCI DSS, Privacy and Compliance Solutions

Hitachi Systems Security is a Qualified Security Assessor (QSA) company from the Payment Card Industry Security Standards Council (PCI SSC) for Canada, the US, the Caribbean and Latin America

Hitachi Systems Security provides comprehensive coverage to help you meet PCI compliance requirements including: