PCI DSS Compliance and Security

  1. Understanding PCI DSS Requirements Structure
    1. High-Level Goals Framework
      1. Build and Maintain Secure Network
        1. Protect Account Data
          1. Maintain Vulnerability Management Program
            1. Implement Strong Access Control
              1. Regularly Monitor and Test Networks
                1. Maintain Information Security Policy
                2. Requirement Numbering System
                  1. Primary Requirements (1-12)
                    1. Sub-requirements Structure
                      1. Testing Procedures
                        1. Guidance Documentation
                        2. Customized Approach vs Defined Approach
                          1. Defined Approach Requirements
                            1. Customized Approach Options
                              1. Documentation Requirements
                                1. Validation Methods
                                2. Applicability Notes
                                  1. Universal Requirements
                                    1. Conditional Requirements
                                      1. Environment-Specific Requirements
                                        1. Technology-Specific Requirements

                                      Previous

                                      1. Introduction to PCI Security Standards

                                      Go to top

                                      Next

                                      3. Scoping for PCI DSS Compliance