IRPC F & A 031516

PAYMENT CARD INDUSTRY DATA SECURITY STANDARD (PCI DSS) • Formed in 2004, PCI DSS defines controls around use of cardholder data to reduce credit card fraud via its exposure • Requires the following: – Build and maintain a secure network – Protect cardholder data

– Maintain a vulnerability management program – Implement strong access control measures – Regularly monitor and test networks – Maintain an information security policy

32