Payment Card Industry – Data Security Standard (PCI-DSS) Implementation

Scope of PCI-DSS – who needs to comply?

PCI is applicable if Primary Account Number (PAN) is stored, processed, or transmitted!  If a PAN is not stored, processed, or transmitted, PCI DSS requirements do not apply!

What is the approach for successful certification?

There are primarily four phases, and in each phase there can be several sub-phases:

Phase I – Determination of Scope /network segment

Phase II – Performing a gap analysis against existing controls. The activity results  in determination of gaps and recommendations

Phase III – Implementation/measurement journey through definition of policy/procedure/documentation on one hand and the implementation of the gaps on the other;

Phase III – Internal Audit is the process of verifying successful implementation, on one hand, and the inclusion of security principle in business lifecycle on the other.

Phase IV – Certification. Total duration of each milestone can vary depending upon the complexity of the organisation.   Talk or write to us at roadma@coralesecure.com to know how we can take you through a successful journey.

PCI – High Level Overview