PCI DSS - Appendix D

Build and Maintain a Secure Network and Systems
Requirement 1Install and maintain a firewall configuration to protect cardholder data
Requirement 2Do not use vendor-supplied defaults for system passwords and other security parameters
Protect Cardholder Data
Requirement 3Protect stored cardholder data
Requirement 4Encrypt transmission of cardholder data across open, public networks
Maintain a Vulnerability Management Program
Requirement 5Protect all systems against malware and regularly update anti-virus software or programs
Requirement 6Develop and maintain secure systems and applications
Implement Strong Access Control Measures
Requirement 7Restrict access to cardholder data by business need to know
Requirement 8Identify and authenticate access to system components
Requirement 9Restrict physical access to cardholder data
Regularly Monitor and Test Networks
Requirement 10Track and monitor all access to network resources and cardholder data
Requirement 11Regularly test security systems and processes
Maintain an Information Security Policy
Requirement 12Maintain a policy that addresses information security for all personnel
Appendix AAdditional PCI DSS Requirements for Shared Hosting Providers
Appendix BCompensating Controls
Appendix CCompensating Controls Worksheet
Appendix DSegmentation and Sampling of Business Facilities/System Components

Segmentation and Sampling of Business Facilities/System Components