Assessing and Implementing Compliance Management for Payment Card Industry (PCI) Data Security Standard (DSS)

Overview

This paper provides an insight into Payment Card Industry Data Security Standard (PCI DSS) and can be used as a practical guide for retailers, merchants and payment providers wishing to learn more about the PCI DSS standard or as an aid for organisations already struggling with the process of implementing PCI DSS. It discusses the critical areas for consideration in both achieving and then maintaining compliance with the standard. Endava does not propose any specific vendor technology to meet these requirements but this paper does provide some of the questions that organisations should be asking of their technology vendor(s) and service provider(s).