When assuring compliance with the Payment Card (PCI) Data Security Standards, Australian businesses should focus on three core areas, CIO reports. In addition to the 12 PCI compliance requirements for best security practices, businesses should focus on assessing, remediating and reporting. Assessing includes taking an IT asset inventory and noting the ways with which payment details are processed. Remediating takes system vulnerabilities into account and stratifies vulnerability levels in order to address the most serious risks first. Businesses also should regularly submit scan reports to their acquiring bank or payment brands approximately every three months. Compliance allows companies to demonstrate their "business professionalism and commitment to data security," the report states.
Full Story