Build and maintain secure networks
Install and maintain network security controls. Apply secure configurations to system components.
Global · PCI Security Standards Council · PCI DSS 4.0
Payment Card Industry Data Security Standard
The global standard that sets security requirements for any entity that stores, processes or transmits payment-card data.
What it is
PCI DSS is the payment-card industry's mandated baseline for protecting cardholder data. v4.0 introduced 64 new or clarified requirements, including targeted risk analysis, DMARC-style phishing controls, client-side script-integrity monitoring (6.4.3) and detection of payment-page script tampering (11.6.1). Merchants and service providers must comply; validation levels depend on annual transaction volumes and scheme requirements.
Who it applies to
All entities that store, process or transmit cardholder data and/or sensitive authentication data - merchants, service providers, acquirers, issuers and processors.
Requirements
Protect account data
Protect stored account data, and use strong cryptography when transmitting it over open networks.
Maintain a vulnerability management program
Protect against malware, and develop and maintain secure systems and software.
Implement strong access control
Restrict access to system components and cardholder data by business need-to-know; identify users; restrict physical access.
Regularly monitor and test networks
Log and monitor access, and regularly test system and network security.
Maintain an information-security policy
Support information security with organisational policies and programs.
Start with a conversation.
Speak to us about your cyber governance and compliance requirements.
Message sent
Thanks. We have your message.
A member of our team will be in touch soon at . You can also reach us during business hours on 1800 816 044.
- Topic
- Company
Need us sooner? Call +61 8 8208 0800, or the 24/7 incident line on 1800 816 044 if something is happening now.