PCI DSS 4.012

Requirements in this framework

• Account and authentication security
• Apply secure configurations to all system components
• Develop and maintain secure systems and software
• Logging and monitoring
• Network security controls
• Protect account data with strong cryptography during transmission
• Protect stored account data
• Protect stored and transmitted account data
• Protect systems and networks from malicious software
• Restrict access to system components and cardholder data by business need
• Security governance and third-party oversight
• Vulnerability and malware management