Incorporating COBIT Best Practices in PCI DSS V2.0 for Effective Compliance

摘要

Payment Card Industry Data Security Standard version 2.0 (PCI DSS v2.0) was released by the PCI Security Council in October 2010 and comes with clarifications and guidance that expand upon the previous version. With more and more transactions based on credit cards, merchants dealing with these are forced to comply with standards such as PCI DSS v2.0 or face huge penalties. As PCI DSS v2.0 is generic in nature while highly specific with in-depth, focused controls, merchants are finding it costly and increasingly difficult to implement and interpret this standard.