University:
Southern New Hampshire University
Course:
IT313 | Risk Management and Mitigation in System Design
Academic year:

2023
Views:

229

Pages:

3
Author:

Cameron T.

3-2 Activity: Payment Card Industry Data Security Standard IT-313 Thistle, Cameron SNHU 03/14/2023 Fertilizer Plus is a small farming business that makes and sells fertilizer. The decision to begin accepting credit card payments from customers for both in-person and online purchases has been made by the executive management. PCI DSS is a requirement that must be taken into consideration for enforcement agencies to verify compliance. The Payment Card Industry Data Security Standard (PCI DSS), a set of security guidelines, was created in 2004 by Visa, MasterCard, Discover Financial Services, JCB International, and American Express. PCI DSS ensures that businesses use firewalls, data encryption, and antivirus software, among other fundamental security measures. This is a fabulous help since it makes it harder for fraudsters to get cardholder information. PCI DSS and Fertilizer Plus IT should work together to prevent cardholder data theft, run a vulnerability management program, and regularly inspect and test the network. This will allow card payments to be made safely. Access control should always be strictly enforced by the IT team. Some best practices include: 1. Keep up-to-date and secure applications and systems. 2. Install and maintain antivirus software on a regular basis. 3. Maintain the system on a regular basis and set up the firewall. 4. Secure all cardholder information. 5. Conduct vulnerability scans on a regular basis. 6. Keep the information security policy in place for everyone. 7. It is necessary to restrict direct access to cardholder data. 8. Test the security systems and procedures on a regular basis.