IT 313 Activity 3-2
.docx
keyboard_arrow_up
School
Southern New Hampshire University *
*We aren’t endorsed by this school
Course
313
Subject
Information Systems
Date
Jan 9, 2024
Type
docx
Pages
8
Uploaded by DrStarSquid15
IT 313 Module Three Activity: Payment Card Industry Data Security Standard
Payment Card Industry Data Security Standard
Table of Contents
Introduction
.................................................................................................................................................
3
1. PCI DSS and Fertilizer Plus Interactions
...........................................................................................
3
2. Best Practices for Meeting PCI DSS Objectives and Requirements
..................................................
5
Conclusion
...........................................................................................................................................
8
References
...................................................................................................................................................
8
2
Payment Card Industry Data Security Standard
Introduction
As Fertilizer Plus embarks on accepting credit card payments from its customers, compliance with the Payment Card Industry Data Security Standard (PCI DSS) becomes paramount. The Payment Card Industry Data Security Standard (PCI DSS) was established to enhance credit card data's security controls and data protection standards (Gibson & Igonor, 2020). This report will explore the interactions between PCI DSS objectives and Fertilizer Plus's IT environment and recommend best practices to achieve compliance. This document is intended
for IT management to review.
1. PCI DSS and Fertilizer Plus Interactions
The following interactions highlight how Fertilizer Plus's IT environment can align with the objectives and requirements of PCI DSS. Implementing the corresponding measures ensures the secure handling of credit card data. In turn, reducing the risk of data breaches and maintaining compliance with industry standards.
Build and Maintain a Secure Network and Systems
o
Requirement: Install and maintain a firewall configuration to protect cardholder data.
o
Requirement: Do not use vendor-supplied defaults for system passwords and security parameters.
o
Interaction: Fertilizer Plus's IT environment includes LANs, remote connections, and servers. Implementing firewalls and secure configurations aligns with PCI DSS requirements, guarding against unauthorized access and potential breaches.
Secure Cardholder Data
3
Your preview ends here
Eager to read complete document? Join bartleby learn and gain access to the full version
- Access to all documents
- Unlimited textbook solutions
- 24/7 expert homework help