PCI Defined
The PCI Security
Standards Council is an open global forum for
the ongoing development, enhancement, storage, dissemination
and implementation of security standards for account data protection.
The PCI Security Standards Council’s mission is to enhance
payment account data security by fostering broad adoption of
the PCI Security Standards. The organization was founded by American
Express, Discover Financial Services, JCB, MasterCard Worldwide,
and Visa International.
By establishing an independent body to govern the security standards
for the payments industry, the founding members of the PCI Security
Standards Council are creating a unified, global system that
is more accessible and efficient for all stakeholders – merchants,
processors, point-of-sale vendors, financial institutions, and
payment companies alike.
The PCI Security Standards Council owns, develops, maintains
and distributes the PCI Data Security Standard (DSS). To improve
compliance and reduce costs and lead times for implementation
of the standard, the PCI Security Standards Council also defines
qualifications for Qualified Security Assessors (QSAs) and Approved
Scanning Vendors (ASVs); and trains, tests and certifies QSAs
and ASVs.
The PCI DSS recognizes wireless LANs as public networks and
therefore provides three specific security guidelines to prevent
breaches coming in from wireless networks used in retail environments.
* Firewall segmentation between wireless networks and the POS
(point-of-sale) networks
* Use of wireless analyzers (a.k.a. Wireless Intrusion Detection)
to detect any unauthorized wireless devices and attacks
* Encryption on the wireless link if credit card data is being
transmitted over the air e.g. wireless POS or mobile POS
applications
PCI
DSS on
Wikipedia