Question: A company stores credit card data in a SQL database for recurring billing after authorization.How can this be done in a PCI DSS compliant manner?
A company stores credit card data in a SQL database for recurring billing after authorization.How can this be done in a PCI DSS compliant manner?
By employing endtoend encryption with the use of strong cryptographic algorithms and key management practices.
By utilizing a Payment Card Industry PIN Transaction SecurityPCI PTS approved Hardware Security Module HSM for cryptographic key management and PIN processing in compliance with the ANSI X standard.
By implementing a Security Information and Event ManagementSIEM system for realtime monitoring, correlation, and analysis of security events, coupled with regular log reviews and alerting mechanisms. By leveraging a Content Delivery Network CDN with WebApplication Firewall WAF capabilities to protect against Layer DDoS attacks and applicationlayer vulnerabilities that may expose stored cardholder data.
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
