|
|
|
|
|
-
Remove sensitive authentication data and limit data retention.
This milestone targets a key area of risk for entities that have been compromised.
Remember if sensitive authentication data and other cardholder data are not stored,
the effects of a compromise will be greatly reduced. If you don't need it, don't
store it.
- Protect the perimeter, internal, and wireless networks.
This milestone targets controls for points of access to most compromises the network
or a wireless access point.
- Secure payment card applications.
This milestone targets controls for applications, application processes, and application
servers. Weaknesses in these areas offer easy prey for compromising systems and
obtaining access to cardholder data.
- Monitor and control access to your systems.
Controls for this milestone allow you to detect the who, what, when and how concerning
who is accessing your network and cardholder data environment.
|
|
- Protect stored cardholder data.
For those organisations that have analysed their business processes and determined
that they must store Primary Account Numbers, milestone five targets key protections
mechanisms for that stored data. - Finalise remaining compliance efforts, and ensure all controls are in place.
The intent of milestone six is to complete PCI DSS requirements and finalise all
remaining related policies, procedures, and processes needed to protect the cardholder
data environment.
|
To find out more about how Nettitude can help you with your Compliance requirements,
please complete our contact form,
and a Consultant will respond to your enquiry.