PCI DSS is the Payment Card Industry Data Security Standard created by the PCI Security Standards Council. If you store, process or transmit sensitive cardholder data then your organization will be in scope for compliance to this standard. You need to achieve and maintain compliance every minute of the day and you will be audited every year. It is not a legal requirement, but it is required by the leading card companies for taking credit and debit card payments. The standards cover numerous processes, including:
- Data collection and storage
- Reporting data protection
- Monitoring and alerting
Read more about PCI DSS