PCI DSS

What is PCI Data Security Standard "PCI DSS"?

PCI DSS (Payment Card Industry Data Security Standard) is a joint venture of five international credit card brands, JCB, American Express, Discover, MasterCard, and VISA, in order to safely protect the credit card information and transaction information we handle. It is a global security standard in the credit industry that has been established.

We use it as part of our security measures to protect the important information we handle.

Holding an information security policy

PCI DSS has the following 12 requirements.

Build and maintain secure networks and systems

1. Install and maintain a firewall to protect cardholder data
2. Do not use vendor-supplied default values for system passwords and other security parameters

Protection of cardholder data

3. Protect stored cardholder data
4. Encrypt cardholder data when transmitted over open public networks

Maintaining a vulnerability management program

5. Protect all systems against malware and regularly update your anti-virus software
6. Develop and maintain highly secure systems and applications

Introduction of powerful access control methods

7. Limit access to cardholder data to the extent necessary for business purposes
8. Identify and authenticate access to system components
9. Restrict physical access to cardholder data

Regular network monitoring and testing

10. Track and monitor all access to network resources and cardholder data
11. Test Security Systems and Processes Regularly

Maintaining information security policy

12. Maintain a policy that addresses the information security of all personnel

Membership in PCI SSC (Payment Card Industry Security Standards Council, LLC)

GMO-PG participates in PCI SSC, a PCI DSS promotion council jointly operated by five international payment brands.