Sign in / up

Addressing PCI compliance

Through privileged access management

Published August 2016

Organisations handling transactions involving credit or debit cards are facing increasing pressure to meet regulatory compliance mandates. In particular, they must comply with the Payment Card Industry Data Security Standard (PCI DSS) version 3, which went into effect in January of 2015.

PCI DSS v3 established various requirements for safeguarding an organisation's relevant systems and networks, comprising the Cardholder Data Environment (CDE). With requirements for strong authentication and access control to the CDE, organisations are challenged with the difficult tasks of implementing multi-factor authentication, access control and activity reporting tools or practices, particularly for privileged or administrative access to these systems.