{"id":528,"date":"2020-04-12T10:24:09","date_gmt":"2020-04-12T10:24:09","guid":{"rendered":"http:\/\/www.pcidssguide.com\/?p=528"},"modified":"2023-10-09T13:14:24","modified_gmt":"2023-10-09T13:14:24","slug":"pci-compliance-checklist","status":"publish","type":"post","link":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/","title":{"rendered":"PCI DSS Compliance Checklist"},"content":{"rendered":"\n\n\n\n\n<p>PCI DSS, which stands for Payment Card Industry Data Security Standard, exists to help businesses protect themselves and their customers by defining how sensitive personal information such as credit card data is stored.<\/p>\n\n\n\n<p>If you are processing payments with debit or credit cards, you must meet and comply with the PCI DSS requirements. Otherwise, you may be subject to various penalties, or your card processing rights may be canceled entirely.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-compliance-best-practices\/\">See Also: PCI DSS Compliance Best Practices<\/a><\/strong><\/p>\n\n\n\n<p>Fraud is a severe problem in the payment industry, and the primary source of these problems is caused by both the customers and the organizations that receive payments.<\/p>\n\n\n\n<p>Concerning <a href=\"https:\/\/pcidssguide.com\/what-is-pci-dss-and-pci-compliance\/\">PCI compliance<\/a>, all data collected from a credit and debit card, such as card number, cardholder ID, PINs, and any chip or magnetic stripe data, are data you need to secure.<\/p>\n\n\n\n<p>Attackers also discover ways to steal such data from card readers, point of sale networks, computers, websites, wireless hotspots, and sometimes from your employees.<\/p>\n\n\n\n<p>Fortunately, most of the data and network security measures you have should also meet your PCI compliance requirements. You can achieve full compliance by setting and maintaining simple goals and procedures.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/tips-and-strategies-for-pci-dss-compliance\/\">See Also: Tips and Strategies for PCI DSS Compliance<\/a><\/strong><\/p>\n\n\n\n<p>Lack of PCI compliance for your business will cost money and reputation. Referring to the PCI compliance checklist will help you take all the necessary steps to become compliant.<\/p>\n\n\n\n<p>You can use the PCI DSS Audit checklist to make sure you meet every requirement. But beware, the requirements may vary based on your transaction volume. It is your responsibility to track the payment transactions and choose the correct compliance level.<\/p>\n\n\n\n<p>Because PCI DSS requirements are complicated at first glance, an essential PCI compliance checklist can assist and simplify your job as an initial introduction to PCI DSS. You can also find detailed PCI DSS compliance checklists and detailed descriptions to guide the implementation of the standards in the links under the control items&#8217; headings.<\/p>\n\n\n\n<p>To make it a little easier for you to establish and maintain compliance with PCI DSS, we have created a short PCI self-assessment guide and checklist. You can reach your PCI compliance by checking that no critical steps are missed.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>12 Steps to Compliance with PCI DSS<\/strong><\/h2>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 1<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-1\/\">See Also: PCI DSS Requirement 1 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Use firewalls to secure critical devices and networks from intruders and malware. The firewall blocks many malicious network traffic that may include malware or illegal access attempts to your system. All your devices and networks must remain protected from untrusted traffic sources or unauthorized access to maintain PCI compliance.<\/p>\n\n\n\n<ul>\n<li>Install a firewall on your network to ensure network security and prevent unauthorized access.<\/li>\n\n\n\n<li>To increase the efficiency of the firewall, you must have a documented firewall configuration policy.<\/li>\n\n\n\n<li>Identify and document unsafe services, protocols, and allowed ports.<\/li>\n\n\n\n<li>Perform regular reviews of your firewall to make sure your firewall rule sets are compatible with your procedures.<\/li>\n\n\n\n<li>Create a network topology diagram that defines all connections between the cardholder data medium and other networks.<\/li>\n\n\n\n<li>Install a personal firewall or any software with equivalent functionality on user devices.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 2<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-2\/\">See Also: PCI DSS Requirement 2 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Never use the default password and system parameters. Routers and other devices you may be used for POS most likely come with a default password. Most wireless routers use a default password, such as admin or password. Using the default passwords without changing them makes it much easier for attackers to enter the network and gain unauthorized access to devices.<\/p>\n\n\n\n<ul>\n<li>Do not use manufacturer-supplied default values \u200b\u200bfor system passwords and other security parameters.<\/li>\n\n\n\n<li>Establish configuration standards for all system components.<\/li>\n\n\n\n<li>Ensure that servers perform only one primary function to avoid coexisting different core functions on the same server and requiring different security levels.<\/li>\n\n\n\n<li>Enable only necessary services, protocols, background procedures as required for business needs.<\/li>\n\n\n\n<li>Keep an inventory of system components that are covered by PCI DSS.<\/li>\n\n\n\n<li>Ensure security policies and operating procedures for managing manufacturer defaults and other security parameters are documented, in use, and known to all affected parties.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 3<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-3\/\">See Also: PCI DSS Requirement 3 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Focus on protecting cardholder data. There are many methods to protect cardholder data, including encryption, hashing, and masking. The important thing is that if there is no business need or legal obligation, do not store cardholder data. If you need to hide, use encryption, hashing, or masking methods that comply with the standards.<\/p>\n\n\n\n<ul>\n<li>Develop a data retention policy that specifies what data should be stored and where that data is located. Thus, when no longer needed, these data can be safely deleted or destroyed.<\/li>\n\n\n\n<li>Do not store sensitive authentication data after authorization. If sensitive authentication data is received, make all data unrecoverable after the authorization process is complete.<\/li>\n\n\n\n<li>Mask the PAN when it is displayed. Only employees with a legitimate business need can see more than the first six \/ last four PAN digits.<\/li>\n\n\n\n<li>Use hashing, truncation, strong cryptography, or index tokens to make PAN unreadable wherever it is stored.<\/li>\n\n\n\n<li>Document and implement all key and cryptographic management procedures and processes used to encrypt cardholder data.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 4<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-4\/\">See Also: PCI DSS Requirement 4 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Encrypt all cardholder information you send over an extensive public network or public networks such as the internet. All information you submit must be protected to remain compliant with PCI DSS.<\/p>\n\n\n\n<ul>\n<li>Use strong cryptography and security protocols to protect sensitive cardholder data over public networks during transmission.<\/li>\n\n\n\n<li>Never send unprotected PANs through end-user messaging technologies.<\/li>\n\n\n\n<li>Ensure that security policies and operational procedures for encrypting cardholder data transfers are documented, used, and understood by all parties involved.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 5<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-5\/\">See Also: PCI DSS Requirement 5 Explained<\/a><\/strong><\/p>\n\n\n\n<p>To protect against malware, use antivirus software, and maintain it regularly. Malware can enter your network and computers in many different ways, from the internet, through an infected USB, or a vulnerability in your hardware.<\/p>\n\n\n\n<ul>\n<li>Install antivirus software on all systems commonly infected with malware.<\/li>\n\n\n\n<li>Ensure all antivirus mechanisms are kept up to date, regular scans are run, and audit logs are generated.<\/li>\n\n\n\n<li>Make sure that antivirus mechanisms are continually working. Users should not be able to remove or replace their antivirus software.<\/li>\n\n\n\n<li>Ensure security policies and operating procedures are documented, used, and understood by all affected parties to protect networks against malware.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 6<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-6\/\">See Also: PCI DSS Requirement 6 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Ensure that software, hardware, and operating systems are up to date with security vulnerabilities and that security patches are installed. Vulnerabilities of operating systems or devices without security patches are the easiest way to add malware to your network. To comply with PCI DSS, you must make every effort to ensure that the covered components are regularly updated.<\/p>\n\n\n\n<ul>\n<li>Establish a mechanism to detect vulnerabilities. Use reliable external sources for information about vulnerabilities and assign a risk score to newly discovered vulnerabilities.<\/li>\n\n\n\n<li>Ensure that all system components and applications are protected from known vulnerabilities by installing security updates released by manufacturers.<\/li>\n\n\n\n<li>Develop software applications that are compliant with PCI DSS.<\/li>\n\n\n\n<li>Follow processes and procedures for change management control for all system component changes.<\/li>\n\n\n\n<li>Build software that focuses on secure coding standards.<\/li>\n\n\n\n<li>Educate software developers at least annually in up-to-date secure coding techniques.<\/li>\n\n\n\n<li>Test web applications accessible from the internet at least once a year through manual or automated security testing techniques or processes.<\/li>\n\n\n\n<li>Ensure security protocols and operating practices to develop and maintain secure systems and applications are documented, used, and known to all affected parties.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 7<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-7\/\">See Also: PCI DSS Requirement 7 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Restrict access to cardholder data only to required people and applications, disable and block other access. Employee errors are the primary reason for leaks or any additional disclosure of cardholder data. Grant employees and systems access when they need it to do their jobs or perform a required task.<\/p>\n\n\n\n<ul>\n<li>Limit access to system components and cardholder data based on business needs.<\/li>\n\n\n\n<li>Restrict access based on a need-to-know principle. Establish an access control mechanism programmed to &#8220;deny everything&#8221; unless specifically allowed.<\/li>\n\n\n\n<li>Ensure security policies and operational processes to restrict access to cardholder data are documented, used, and known to all interested parties.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 8<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-8\/\">See Also: PCI DSS Requirement 8 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Set unique passwords for anyone with access to cardholder data. Do not share passwords and usernames. Establish policies on identity management and passwords, and train employees to avoid sharing credentials. Unique identities such as usernames are important in audits so that you can identify who has accessed cardholder information.<\/p>\n\n\n\n<ul>\n<li>Establish and enforce policies and procedures to ensure that user IDs are properly handled across all system components for service accounts and administrators.<\/li>\n\n\n\n<li>Provide convenient user authentication management for administrators using multi-factor authentication for all individual non-console administrative access and all remote access to the CDE.<\/li>\n\n\n\n<li>Document authentication policies and procedures and communicate with all users.<\/li>\n\n\n\n<li>Do not use groups, shared or generic IDs, and passwords.<\/li>\n\n\n\n<li>All-access to any database containing cardholder data should be restricted only by programmatic methods.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 9<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-9\/\">See Also: PCI DSS Requirement 9 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Restrict physical access to servers or machines that process, store, or transfer cardholder data. Any removable device can be used as a gateway for malware and attackers. Therefore, make sure that only trusted personnel can access physical devices containing cardholder information.<\/p>\n\n\n\n<ul>\n<li>Use appropriate facility entry controls to restrict and monitor physical access to systems in the cardholder data environment.<\/li>\n\n\n\n<li>Establish procedures to distinguish staff and guests on-site quickly.<\/li>\n\n\n\n<li>Provide control of physical access to sensitive areas for on-site personnel.<\/li>\n\n\n\n<li>Physically protect all media.<\/li>\n\n\n\n<li>Maintain tight control over any media distributed internally or externally.<\/li>\n\n\n\n<li>Maintain tight control over media storage and accessibility.<\/li>\n\n\n\n<li>Destroy media, when a business or legal purposes no longer require it.<\/li>\n\n\n\n<li>Take and secure tampering and tampering measures for devices that capture payment card data.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 10<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-10\/\">See Also: PCI DSS Requirement 10 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Track and monitor what is happening on networks and devices that contain cardholder data. Apply daily monitoring schedules to monitor sensitive data access. You need to know who accessed anything on the network and when.<\/p>\n\n\n\n<ul>\n<li>Apply audit trails to link access to all system components to each user and all system components.<\/li>\n\n\n\n<li>The logs should contain the user ID, event type, date, time, and affected component information.<\/li>\n\n\n\n<li>Synchronize critical system clocks and times using time synchronization technology.<\/li>\n\n\n\n<li>Protect audit trails securely so they cannot be altered.<\/li>\n\n\n\n<li>Examine logs and security events to detect abnormalities or suspicious activity on all system components.<\/li>\n\n\n\n<li>Retain audit trail records for a minimum of one year, with three months for immediate review.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 11<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-11\/\">See Also: PCI DSS Requirement 11 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Evaluate security measures, including employees. Whether the vulnerability is in hardware, software, or a worker error, everything is vulnerable to an attacker with sufficient time and access. Regular testing of penetration testing and cardholder data with internal vulnerability scans will enable you to take the necessary precautions.<\/p>\n\n\n\n<ul>\n<li>Apply a process to check the presence of wireless access points. Detect and classify both permitted and unauthorized wireless access points quarterly.<\/li>\n\n\n\n<li>Scan internal and external networks for vulnerabilities at least once a year.<\/li>\n\n\n\n<li>Apply a penetration testing methodology that focuses on industry-accepted approaches.<\/li>\n\n\n\n<li>Perform an external and internal leak test at least once a year.<\/li>\n\n\n\n<li>Use intrusion detection or intrusion prevention techniques to detect or prevent network intrusions.<\/li>\n\n\n\n<li>Use change detection tools for file integrity monitoring and be aware of unwanted changes to critical system data.<\/li>\n\n\n\n<li>Ensure security policies and operating procedures are documented, in use, and known to all affected parties for security monitoring and testing.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist # 12<\/strong><\/h2>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/pci-dss-requirement-12\/\">See Also: PCI DSS Requirement 12 Explained<\/a><\/strong><\/p>\n\n\n\n<p>Establish policies and procedures that govern data security and define eleven previous requirements. Policies set your organization&#8217;s security framework and ensure that both new and experienced employees understand what you expect of them.<\/p>\n\n\n\n<p>Even if protections are available, you must communicate and work to enforce your policy. Each employee must know and follow your third-party vendor and customer policies.<\/p>\n\n\n\n<p>Your written security policy should include an overview of how you are protecting customer data. All required persons should be made aware of the PCI standards and how to comply with them.<\/p>\n\n\n\n<ul>\n<li>Establish, publish, maintain, and distribute a security policy.<\/li>\n\n\n\n<li>Implement a risk assessment procedure that is performed at least annually.<\/li>\n\n\n\n<li>Develop strategies for the use of critical technologies and determine the acceptable use of these technologies.<\/li>\n\n\n\n<li>Make sure that the security policy and procedures clearly define responsibilities for all personnel involved in information security.<\/li>\n\n\n\n<li>Implement a security awareness program to bring cardholders&#8217; data security policies and procedures to all staff&#8217;s attention.<\/li>\n\n\n\n<li>Perform background screening of potential personnel before hiring to minimize the risk of internal attack sources.<\/li>\n\n\n\n<li>Maintain and enforce policies and procedures to control service providers where cardholder data is shared or affect cardholder data security.<\/li>\n\n\n\n<li>Implement an incident response plan. Get ready to respond to a system breach immediately.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>PCI DSS Compliance Checklist Best Practices<\/strong><\/h2>\n\n\n\n<p>If you choose &#8220;yes&#8221; for each of the above items, your company is in an excellent position to make your PCI DSS compliance process successful.<\/p>\n\n\n\n<p>The purpose of the PCI DSS checklist is to provide a basic overview of PCI compliant applications and speed up your compliance work by specifying the requirements&#8217; basic needs. Therefore, the list should not be regarded as an approved, detailed checklist or PCI compliance assessment.<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/pcidssguide.com\/how-to-prepare-for-a-pci-dss-audit\/\">See Also: How to Prepare for a PCI DSS Audit<\/a><\/strong><\/p>\n\n\n\n<p>It is essential to build a climate of trust with your customers because a lack of confidence can also affect your overall well-being. Compliance with PCI standards is crucial to increase trust in your customers, prospects, and business partners.<\/p>\n\n\n\n<p>The PCI compliance checklist items should be used to optimize data protection techniques following recommended technology and best practices.<\/p>\n\n\n\n<p>For detailed information, you can review the <a href=\"https:\/\/www.pcisecuritystandards.org\/documents\/PCI_DSS-QRG-v3_2_1.pdf\">PCI DSS Quick Reference Guide: Understanding Payment Card Industry Data Security Standard version 3.2.1.<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>PCI DSS stands for Data Security Standard on Payment Card Industry. Such standards are in place to help businesses protect themselves and their customers by defining how sensitive personal information is stored such as credit card data.<\/p>\n","protected":false},"author":1,"featured_media":529,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","footnotes":""},"categories":[45,19],"tags":[85],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>PCI DSS Compliance Checklist - PCI DSS GUIDE<\/title>\n<meta name=\"description\" content=\"PCI compliance checklist can assist and simplify your job as an initial introduction to PCI DSS. Make sure you meet every requirement.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"PCI DSS Compliance Checklist - PCI DSS GUIDE\" \/>\n<meta property=\"og:description\" content=\"PCI compliance checklist can assist and simplify your job as an initial introduction to PCI DSS. Make sure you meet every requirement.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/\" \/>\n<meta property=\"og:site_name\" content=\"PCI DSS GUIDE\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-12T10:24:09+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-10-09T13:14:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1280\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Surkay Baykara\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Surkay Baykara\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/\"},\"author\":{\"name\":\"Surkay Baykara\",\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741\"},\"headline\":\"PCI DSS Compliance Checklist\",\"datePublished\":\"2020-04-12T10:24:09+00:00\",\"dateModified\":\"2023-10-09T13:14:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/\"},\"wordCount\":2317,\"publisher\":{\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741\"},\"image\":{\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg\",\"keywords\":[\"pci compliance checklist\"],\"articleSection\":[\"PCI Compliance Checklist\",\"PCI DSS\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/\",\"url\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/\",\"name\":\"PCI DSS Compliance Checklist - PCI DSS GUIDE\",\"isPartOf\":{\"@id\":\"https:\/\/pcidssguide.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg\",\"datePublished\":\"2020-04-12T10:24:09+00:00\",\"dateModified\":\"2023-10-09T13:14:24+00:00\",\"description\":\"PCI compliance checklist can assist and simplify your job as an initial introduction to PCI DSS. Make sure you meet every requirement.\",\"breadcrumb\":{\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#primaryimage\",\"url\":\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg\",\"contentUrl\":\"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg\",\"width\":1920,\"height\":1280,\"caption\":\"PCI Compliance Checklist\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/pcidssguide.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"PCI DSS Compliance Checklist\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/pcidssguide.com\/#website\",\"url\":\"https:\/\/pcidssguide.com\/\",\"name\":\"PCI DSS GUIDE\",\"description\":\"PCI Compliance Guide For All Business\",\"publisher\":{\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/pcidssguide.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741\",\"name\":\"Surkay Baykara\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/b90b993a161f1830913c4409f7b4faa0?s=96&d=monsterid&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/b90b993a161f1830913c4409f7b4faa0?s=96&d=monsterid&r=g\",\"caption\":\"Surkay Baykara\"},\"logo\":{\"@id\":\"https:\/\/pcidssguide.com\/#\/schema\/person\/image\/\"},\"description\":\"A passionate Senior Information Security Consultant working at Cyberwise. Over the past 15+ years my professional career has included several positions beginning as a developer and IT administrator, working my way up to a senior Technical Performance Consultant before joining Biznet back in 2015. I had several different roles at Cyberwise, including Penetration Tester and PCI DSS QSA. In my job as a QSA, I found my passion and worked closely with the Audit and Compliance team. I've been working inside InfoSec for over 15 years, coming from a highly technical background. I have earned several certifications during my professional career including; CEH, CISA, CISSP, and PCI QSA.\",\"sameAs\":[\"https:\/\/www.pcidssguide.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"PCI DSS Compliance Checklist - PCI DSS GUIDE","description":"PCI compliance checklist can assist and simplify your job as an initial introduction to PCI DSS. Make sure you meet every requirement.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/","og_locale":"en_US","og_type":"article","og_title":"PCI DSS Compliance Checklist - PCI DSS GUIDE","og_description":"PCI compliance checklist can assist and simplify your job as an initial introduction to PCI DSS. Make sure you meet every requirement.","og_url":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/","og_site_name":"PCI DSS GUIDE","article_published_time":"2020-04-12T10:24:09+00:00","article_modified_time":"2023-10-09T13:14:24+00:00","og_image":[{"width":1920,"height":1280,"url":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg","type":"image\/jpeg"}],"author":"Surkay Baykara","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Surkay Baykara","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#article","isPartOf":{"@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/"},"author":{"name":"Surkay Baykara","@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741"},"headline":"PCI DSS Compliance Checklist","datePublished":"2020-04-12T10:24:09+00:00","dateModified":"2023-10-09T13:14:24+00:00","mainEntityOfPage":{"@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/"},"wordCount":2317,"publisher":{"@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741"},"image":{"@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#primaryimage"},"thumbnailUrl":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg","keywords":["pci compliance checklist"],"articleSection":["PCI Compliance Checklist","PCI DSS"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/","url":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/","name":"PCI DSS Compliance Checklist - PCI DSS GUIDE","isPartOf":{"@id":"https:\/\/pcidssguide.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#primaryimage"},"image":{"@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#primaryimage"},"thumbnailUrl":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg","datePublished":"2020-04-12T10:24:09+00:00","dateModified":"2023-10-09T13:14:24+00:00","description":"PCI compliance checklist can assist and simplify your job as an initial introduction to PCI DSS. Make sure you meet every requirement.","breadcrumb":{"@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pcidssguide.com\/pci-compliance-checklist\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#primaryimage","url":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg","contentUrl":"https:\/\/pcidssguide.com\/wp-content\/uploads\/2020\/04\/pci-compliance-checklist.jpg","width":1920,"height":1280,"caption":"PCI Compliance Checklist"},{"@type":"BreadcrumbList","@id":"https:\/\/pcidssguide.com\/pci-compliance-checklist\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pcidssguide.com\/"},{"@type":"ListItem","position":2,"name":"PCI DSS Compliance Checklist"}]},{"@type":"WebSite","@id":"https:\/\/pcidssguide.com\/#website","url":"https:\/\/pcidssguide.com\/","name":"PCI DSS GUIDE","description":"PCI Compliance Guide For All Business","publisher":{"@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pcidssguide.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/2ddca45b459107e6bc5b46c0cbc9c741","name":"Surkay Baykara","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/b90b993a161f1830913c4409f7b4faa0?s=96&d=monsterid&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/b90b993a161f1830913c4409f7b4faa0?s=96&d=monsterid&r=g","caption":"Surkay Baykara"},"logo":{"@id":"https:\/\/pcidssguide.com\/#\/schema\/person\/image\/"},"description":"A passionate Senior Information Security Consultant working at Cyberwise. Over the past 15+ years my professional career has included several positions beginning as a developer and IT administrator, working my way up to a senior Technical Performance Consultant before joining Biznet back in 2015. I had several different roles at Cyberwise, including Penetration Tester and PCI DSS QSA. In my job as a QSA, I found my passion and worked closely with the Audit and Compliance team. I've been working inside InfoSec for over 15 years, coming from a highly technical background. I have earned several certifications during my professional career including; CEH, CISA, CISSP, and PCI QSA.","sameAs":["https:\/\/www.pcidssguide.com"]}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/posts\/528"}],"collection":[{"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/comments?post=528"}],"version-history":[{"count":1,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/posts\/528\/revisions"}],"predecessor-version":[{"id":2220,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/posts\/528\/revisions\/2220"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/media\/529"}],"wp:attachment":[{"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/media?parent=528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/categories?post=528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pcidssguide.com\/wp-json\/wp\/v2\/tags?post=528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}