Proces primene PCI standarda

Abstract

Rad opisuje PCI standarde: PCI PED, PCI PA-DSS i PCI DSS. Osnovna namena ovih standarda je da zaštiti korisnike kartica od neautorizovanog pristupa podacima. Kako se zloupotrebe u sistemima platnih kartica povećavaju, tako i primena PCI standarda postaje obavezna za trgovce, banke i provajdere servisa. Primena PCI standarda doprinosi ostvarenju visokog nivoa zaštite podataka korisnika kartica. Način za implementaciju PCI DSS standarda nije jedinstven. U ovom radu je prikazan pristup zasnovan na prioritetima koji za neke organizacije može imati prednosti u odnosu na druge pristupe.

The paper describes PCI standards: PCI PED, PCI PA-DSS, and PCI DSS. The main purpose of these new standards is to protect cardholders against unauthorized data access. As fraud in payment card systems increases, PCI standards compliance becomes mandatory for merchants, banks, and service providers. Applying the PCI standards contributes to achievement of high level of cardholder data security. The way to become PCI DSS compliant is not unique. In this paper prioritized approach is presented, which may have advantages for some organizations.