PCI Data Security Standard

• Addressing PCI Compliance Via the Database Whitepaper
• Regulatory Compliance at the Database Level Solution Brief

This compliance pack includes:

• A datasheet which describes how AppSecInc products can help bring PCI Data Security Standard compliance to your database applications
• A guide which maps specific PCI requirements to security and configuration checks within AppDetectivePro
• Penetration Test and Audit policies for AppDetectivePro

In a collaborative effort to ensure the protection of customers' personal information, the major credit card companies (Visa, MasterCard, American Express, Discover, Diner's Club, JCB) established the PCI Data Security Standard, which outlines 12 security requirements for all members, merchants, and vendors who process, transmit, or store cardholder data.

With over 100 sub-requirements in the PCI Data Security Standard, AppSecInc solutions help you comply with sections in 7 of the 12 security guidelines:

• 2: Do not use vendor-supplied defaults for system passwords and other security parameters
• 3: Protect stored data
• 6: Develop and maintain secure systems and applications
• 7: Restrict access to data by business need-to-know
• 8: Assign unique ID to each person with computer access
• 10: Track and monitor all access to network resources and cardholder data
• 11: Regularly test security systems and processes