[PCI-DSS] Requirement 12: Maintain a policy that addresses information security - PCI DSS FAQ - Payment Card Industry (PCI) Data Security Standard Discussion Forum

		PCI DSS FAQ - Payment Card Industry (PCI) Data Security Standard Discussion Forum > Payment Card Industry Data Security Standard Frequently Asked Questions (PCI DSS FAQ) > Maintain an Information Security Policy
[PCI-DSS] Requirement 12: Maintain a policy that addresses information security

[PCI-DSS] Requirement 12: Maintain a policy that addresses information security A strong security policy sets the security tone for the whole company and informs employees what is expected of them. All employees should be aware of the sensitivity of data and their responsibilities for protecting it.

Page 1 of 3

Threads in Forum : [PCI-DSS] Requirement 12: Maintain a policy that addresses information security

Forum Tools

Search this Forum

Rating Thread / Thread Starter	Last Post	Replies	Views
12.1 Establish, publish, maintain, and disseminate a security policy that accomplishes the following: admin	11-12-2009 06:37 AM by needaholiday	2	1,695
12.1.1 Addresses all requirements in this specification admin	03-18-2007 03:36 AM by admin	0	930
12.1.2 Includes an annual process that identifies threats, and vulnerabilities, and results in a formal risk assessment admin	12-05-2007 10:50 AM by Roger Nebel	2	1,419
12.1.3 Includes a review at least once a year and updates when the environment changes admin	03-18-2007 03:36 AM by admin	0	789
12.10 All processors and service providers must maintain and implement policies and procedures to manage connected entities, to include the following admin	03-18-2007 03:48 AM by admin	0	792
12.10.1 Maintain list of connected entities admin	03-18-2007 03:48 AM by admin	0	943
12.10.2 Ensure proper due diligence is conducted prior to connecting an entity admin	03-18-2007 03:48 AM by admin	0	710
12.10.3 Ensure the entity is PCI DSS compliant admin	03-18-2007 03:49 AM by admin	0	903
12.10.4 Connect and disconnect entities by following an established process admin	03-18-2007 03:49 AM by admin	0	931
12.2 Develop daily operational security procedures that are consistent with requirements in this specification (for example, user account maintenance procedures, and log review procedures). admin	07-08-2010 08:10 AM by Roger Nebel	5	2,489
12.3 Develop usage policies for critical employee-facing technologies (such as modems and wireless) to define proper use of these technologies for all employees and contractors. Ensure these usage policies require the following: admin	03-18-2007 03:37 AM by admin	0	954
12.3.1 Explicit management approval admin	03-18-2007 03:37 AM by admin	0	764
12.3.10 When accessing cardholder data remotely via modem, prohibition of storage of cardholder data onto local hard drives, floppy disks, or other external media. Prohibition of cut-and-paste and print functions during remote access admin	09-30-2009 06:19 AM by mfarid	1	1,004
12.3.2 Authentication for use of the technology admin	03-18-2007 03:38 AM by admin	0	752
12.3.3 A list of all such devices and personnel with access admin	03-18-2007 03:38 AM by admin	0	766
12.3.4 Labeling of devices with owner, contact information, and purpose admin	03-18-2007 03:38 AM by admin	0	906
12.3.5 Acceptable uses of the technology admin	03-18-2007 03:39 AM by admin	0	770
12.3.6 Acceptable network locations for the technologies admin	03-18-2007 03:39 AM by admin	0	895
12.3.7 List of company-approved products admin	03-18-2007 03:39 AM by admin	0	860
12.3.8 Automatic disconnect of modem sessions after a specific period of inactivity admin	03-18-2007 03:40 AM by admin	0	824

Page 1 of 3

Forum Tools	Search this Forum
Mark This Forum Read View Parent Forum	Search this Forum : Advanced Search

	New posts		Hot thread with new posts
	No new posts		Hot thread with no new posts
	Thread is closed

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Forum Rules

All times are GMT -4. The time now is 06:58 PM.