VISA Payment Card Industry (PCI) Compliance

The new Payment Card Industry (PCI) Data Security Standard outlines best practices for credit card data that is stored, processed, or transmitted. All major credit card issuers, including Visa, MasterCard, American Express, Diners Club, and Discover, jointly developed PCI. Most merchants are required to comply with this standard. There are 12 key requirements (listed under 6 categories) that retailers must implement to be compliant:

Build and Maintain a Secure Network:
1. Install and maintain a firewall configuration
2. Do not use vendor-supplied defaults

Protect Cardholder Data:
3. Protect stored data
4. Encrypt transmission of cardholder data and sensitive information across public networks

Maintain a Vulnerability Management Program:
5. Use and regularly update anti-virus software
6. Develop and maintain secure systems and applications

Implement Strong Access Control Measures:
7. Restrict access to data on a need-to-know basis
8. Assign a unique ID to each person with access to the computer system
9. Restrict physical access to cardholder data

Regularly Monitor and Test Networks:
10. Track and monitor access to network resources and cardholder data
11. Test security systems and processes on a regular basis

Maintain an Information Security Policy:
12. Maintain a policy that addresses information security

These security requirements apply to all "system components" which is defined as any network component, server, or application included in, or connected to, the cardholder data environment. Network components include, but are not limited to, firewalls, switches, routers, wireless access points, network appliances, and other security appliances.

How does CipherOptics help?
CipherOptics protects all data that traverses your network, or leased third party networks. We enable Secure Information Sharing across any network, regardless of the size, type or topology. Our approach to protecting both your network and your data is to deny access to everyone, permit by exception. With that as our driving force, our solutions provide you with both encryption and authentication of all your business critical information.

About CipherOptics
CipherOptics is the leader in network-wide encryption. Offering an innovative policy and key management solution, coupled with high speed, low latency encryption technology, CipherOptics helps their customers mitigate the risk of data leakage, loss and theft over any network.

Learn more about PCI DSS

Learn more about Secure Information Sharing

Helpful Resources
PCI Security Audit Procedures

For more information or to learn how CipherOptics can help you protect your sensitive data as it moves across any network, call us at 1-877-878-6655 or feel free to ask us a quick question.