What is PA-DSS?
PA-DSS mandates that all point-of-sale (POS) equipment and terminals meet the PCI DSS standards. That means that if you have a POS system, most of your PCI compliance is already handled by your POS hardware.
Everyone needs to make sure they are compliant.
How to ensure PCI DSS compliance
To comply with the PCI DSS, you must follow these 12 requirements designed to protect cardholders’ data from theft via data breaches:
- Install and maintain a firewall configuration to protect cardholder data.
- Do not use vendor-supplied defaults for system passwords and other security parameters.
- Protect stored data.
- Encrypt the transmission of cardholder data across open, public networks.
- Use and regularly update top antivirus software or programs.
- Develop and maintain secure systems and applications.
- Restrict access to cardholder data on a business need-to-know basis.
- Assign a unique ID to each person with computer access.
- Restrict physical access to cardholder data.
- Track and monitor all access to network resources and cardholder data.
- Regularly test security systems and processes.
- Maintain, publish and enforce a policy that addresses information security for all personnel.
These 12 standards must be continually met and reported to ensure compliance.
For more information: Click Here