Glossary: Compliance, Privacy and Penetration Testing

PCI DSS

Also written: Payment Card Industry Data Security Standard

Payment Card Industry Data Security Standard: the card brands' security rules for any business that accepts cards. It is enforced mainly through contracts with banks, and it requires quarterly ASV scans and yearly pen tests.

Where the book teaches it

Chapter 1: Consequences of Non-compliance
Chapter 2: Privacy and Legal Compliance
Chapter 3: Gathering Audit Evidence and Setting the Scope
Chapter 4: Types of Audit and Assessment
Chapter 5: Penetration Testing

Related terms

Merchant agreement QSA SAQ ASV Tokenization Report on Compliance