PCI Compliance Services
Does the PCI DSS (Payment Card Industry Data Security Standard) apply to your business? It’s critical that you know! PCI DSS applies to any organization – no matter the size -- that accepts, transmits or stores credit cardholder data. If this describes your business, including retail stores and restaurants, let’s talk today.
Through our trusted PCI Compliance Services, Trestle Networks will work closely with your team members to satisfy each PCI DSS 3.2 (which replaced 3.1 as of February 1, 2018) milestone listed below (excerpt from the PCI Security Standards Council document “PCI DSS Prioritized Approach for PCI DSS 3.2”). Each milestone in turn maps to extensive requirements that must be met for your business to be 100% compliant.
REMOVE SENSITIVE AUTHENTICATION DATA AND LIMIT DATA RETENTION.
This milestone targets a key area of risk for entities that have been compromised. Remember – if sensitive authentication data and other cardholder data are not stored, the effects of a compromise will be greatly reduced. If you don’t need it, don’t store it.
PROTECT SYSTEMS AND NETWORKS, AND BE PREPARED TO RESPOND TO A SYSTEM BREACH.
This milestone targets controls for points of access to most compromises, and the processes for responding.
SECURE PAYMENT CARD APPLICATIONS.
This milestone targets controls for applications, application processes, and application servers. Weaknesses in these areas offer easy prey for compromising systems and obtaining access to cardholder data.
MONITOR AND CONTROL ACCESS TO YOUR SYSTEMS.
Controls for this milestone allow you to detect the who, what, when, and how concerning who is accessing your network and cardholder data environment.
PROTECT STORED CARDHOLDER DATA.
For those organizations that have analyzed their business processes and determined that they must store Primary Account Numbers, Milestone Five targets key protection mechanisms for that stored data.
FINALIZE REMAINING COMPLIANCE EFFORTS, AND ENSURE ALL CONTROLS ARE IN PLACE.
The intent of Milestone Six is to complete PCI DSS requirements, and to penalize all remaining related policies, procedures, and processes needed to protect the cardholder data environment.