PCI DSS

PCI DSS – 9 steps for build your PCI Compliance

by  • 

I had followed theses 9 steps for build my compliance in this last year. I think it’s a good approach for big processor and all PSP.

  1. Establishing the PCI Project (Actors, budget…).
  2. Determine the scope (CDE).
  3. Review the information Security Policy (ISP or PSSI for french people).
  4. Conduct Gap Analysis.
  5. Conduct Risk Analysis.
  6. Establish the baseline and sharing it !!!
  7. Auditing
  8. Remedation planning
  9. Maintaining and desmontrating Compliance.

Don’t forget if your company (CEO, COO, CTO and all people) don’t support this, you don’t successfully the certification. PCI DSS is not infrastructure or Security project. It’s a Strategic business project.