PSI DSS Requirements

Helps protect payment card data and enhance payment security

1. Build and maintain a secure network and systems

R1: Install and maintain network security controls (firewalls, etc)
R2: Apply secure configurations to all system components

2. Protect account data

R3: Protect stored account data

R4: Protect cardholder data with strong cryptography during transmission over networks

3. Maintain a vulnerability management program

R5: Protect all systems and networks from malicious software (anti-malware)

R6: Develop and maintain secure systems and software (secure coding, patch management)

4. Implement strong access control measures

R7: Restrict access to system components and cardholder data using need to know principles

R8: Identify users and authenticate access to system components (unique IDs, multifactor authentication)

R9: Restrict physical access to cardholder data (secure facilities, locked rooms)

5. Regularly monitor and test networks

R10: Log and monitor all access to system components and cardholder data (audit trails)

R11: Test security of systems and networks regularly (vulnerability scans, penetration testing)

6. Maintain an information security policy

R12: Support information security with organizational policies and programs