There are six control objectiveswithin thePCI DSSstandard. To be compliant, you need to include these control objectives in your security policies and controls. These control objectives are: 1-Build and maintain a secure network?Refers to having specific firewall, system password, and other security network layer controls. 2-Protect cardholder data?Specifies how cardholder data is stored and protected. Also sets rules on the encryption of the data. 3-Maintain a vulnerability management program?Specifies how to maintain secure systems and applications, including the required use of antivirus software. 4-Implement strong access control measures?Refers to restricting access to cardholder data on a need-to know basis. It requires physical controls in place and individual unique IDs when accessing cardholder data. 5-Regularly monitor and test networks?Requires monitoring access to cardholder. Also requires periodic penetration testing of the network. 6-Maintain an information security policy?Requires that security policies reflect the PCI DSS requirements. Requires these policies are kept current and an awareness program is implemented.

Task:

All major credit card companies have dedicated online portals to explain the way that they keep card member information safe and secure. The following are the links to the security portal for

Discover Card:

https://www.discoverglobalnetwork.com/resources/businesses/fraud-prevention-practices/

From Card secure features

https://www.discoverglobalnetwork.com/content/dam/discover/en_us/dgn/pdfs/card-identification-features.pdf

describe how they address PCI DSS compliance.

Transcribed Image Text:

Mapping feature/PCI How Card security features addresses PCI DSS compliance. DSS requirement Feature Description PCI DSS Requirement feature#1 feature#2 Mapping feature/PCI How Card security features addresses PCI DSS compliance. DSS requirement Feature Description PCI DSS Requirement feature#1 feature#2