Chapter 1 - About PCI and This Book

Abstract

This chapter introduces a book that explains the payment card industry (PCI) data security standard (DSS) guidelines. The goal of this chapter is to not only teach PCI DSS requirements but also to help understand the way these PCI DSS requirements fit into an organization's network security framework and how network security controls can be implemented effectively. The credit card industry—banded together to develop PCI DSS—ensures the protection of credit card customer information and the industry. Breaches of customer information lead to the loss of money and damaged reputations, and the credit card industry wants to protect itself from financial losses or eroded consumer confidences in credit cards. Virtually all businesses, whether big or small, need to understand the scope of PCI DSS and the implementation of network security, which is compliant with the PCI guidelines. Businesses should be prepared to face penalties or the possibility of having their merchant status revoked or potentially being banned from accepting or processing credit cards. This book is kind of a strategic business guide to help the executive managements of organizations understand the implications of PCI DSS.