The PCI data security standard as for organizations that handle credit cards from the major card schemes
basically PCI is a set of rules to follow if your company processes payments the type of data that is
supposed to be protected by PCI compliance are things like cardholder names pins and account numbers.
The first PCI standard PCI 1.0 was released in 2004.
The latest version is PCI 3.2.
The latest requirements can be found on the PCI security standards Web site.
Currently there are 12 requirements
to view the detailed PCI security standards document from the home page.
You can actually click on document library and then click on View document for PCI DSS Berzon 3.2.
Click on PCI DSS for the cyber ops exam.
You of course do not need to memorize the entire PCI DSS document but I would at least go over the high
level overview of the 12 PCI DSS requirements and commit those to memory and also make sure you know
the different types of cardholder data listed on page 7.
So those are two big things that I would focus on.
Of course go through the whole guide.
There are some really good stuff about network segmentation as well as best practices for implementing
PCI
really the best way to be PCI compliant is to create a dedicated PCI environment for any PCI systems.
Then you only have to maintain PCI compliance for a small portion of your network.