Framework template
The information security standard for organisations that store, process or transmit cardholder data. Version 4.0 organises twelve principal requirements under six goals.
Bundled template
PCI DSS v4.0
85 controls · 12 categories
| Control | Category |
|---|---|
| 1.1.1Security Policies Defined | Network Security |
| 1.2.1Configuration Standards | Network Security |
| 1.2.5Inbound/Outbound Traffic | Network Security |
| 1.3.1CDE Network Segmentation | Network Security |
| 1.3.2Outbound Traffic Restrictions | Network Security |
| 1.4.1DMZ Implementation | Network Security |
| 1.5.1Wireless Security | Network Security |
| 2.1.1Secure Configuration Policies | Secure Config |
| and 77 more | |
Payment Card Industry Data Security Standard
In practice
PCI DSS applies to every entity in the cardholder data environment. Validation is by self-assessment questionnaire or by a qualified assessor, against documented controls and the evidence that they operate.
Requirements
01
Network security controls installed and maintained, and secure configurations applied to every system component.
02
Stored account data protected, the primary account number masked when displayed, cardholder data encrypted in transit.
03
Systems protected against malicious software; secure systems and software developed and maintained.
04
Access restricted by business need, users identified, physical access restricted, and all access logged and monitored.
How the Desk helps
Each step below is shipped: the template import in Compliance Studio, and workflows that run over the documents you choose, record their sources and hold for approval before export.
Import the requirement set from the template and track the status and owner of each control.
Run Review controls over your security policies and procedures. The run records every document it read; a control memo names the requirements with gaps.
Evidence is held per requirement with its status. Find missing evidence and Prepare audit checklist run over the evidence documents you select, exported once approved.
Other templates
Next step
Bring the policies you have and the last audit's request list. We will import the template, run the workflows with you and hand back the controls, the evidence on file and each run's sources.
Security
GDPR and CCPA compliant, ISO 27001 aligned, SOC 2 Type II in progress. Encrypted at rest and in transit. Your data never trains a model.
Security page