Extending PCI Compliance to the Mobile Workforce

Overview

The Payment Card Industry (PCI) Security Standards Council developed an explicit Data Security Standard (DSS) which outlines the minimum controls necessary to protect the system components that support cardholder data environments. The Council added teeth to the security standard by enforcing it through regular audits and assessments conducted by authorized agencies. The controls outlined in the 12 requirements of PCI DSS specifically address system components - the point-of-sale devices, servers, network, applications and storage - that support cardholder data environments. Consequently, this is the network segment that organizations focus on when devising, implementing, maintaining and assessing their security controls.