PCI DSS and Kudo
How Kudo, through its ISMS, relates to PCI DSS: domain mapping, controls and compliance objectives explained step by step.
The Payment Card Industry Data Security Standard (PCI DSS) v4.0 is the global security standard for organizations that process, store or transmit payment card data. It defines 12 requirements organized into 6 control objectives. Kudo maps its requirements and sub-requirements to the framework and the ISMS policies.
PCI DSS v4.0 Structure
6 Objectives
Secure network, data protection, vulnerability management, access control, monitoring and security policy.
12 Requirements
Security requirements covering the complete card data protection cycle.
63 Sub-requirements
Specific controls distributed across the 12 requirements of the standard.
PCI DSS v4.0 Requirements by Objective
| Objective | Requirement | Description | Sub-req. |
|---|---|---|---|
| 1 — Secure Network | Req. 1 | Install and Maintain Network Security Controls | 5 |
| 1 — Secure Network | Req. 2 | Apply Secure Configurations to All System Components | 3 |
| 2 — Data Protection | Req. 3 | Protect Stored Account Data | 7 |
| 2 — Data Protection | Req. 4 | Protect Cardholder Data with Strong Cryptography During Transmission | 2 |
| 3 — Vulnerability Management | Req. 5 | Protect All Systems and Networks from Malicious Software | 4 |
| 3 — Vulnerability Management | Req. 6 | Develop and Maintain Secure Systems and Software | 5 |
| 4 — Access Control | Req. 7 | Restrict Access to System Components and Cardholder Data | 3 |
| 4 — Access Control | Req. 8 | Identify Users and Authenticate Access to System Components | 6 |
| 4 — Access Control | Req. 9 | Restrict Physical Access to Cardholder Data | 5 |
| 5 — Monitoring and Testing | Req. 10 | Log and Monitor All Access to System Components and Cardholder Data | 7 |
| 5 — Monitoring and Testing | Req. 11 | Test Security of Systems and Networks Regularly | 6 |
| 6 — Security Policy | Req. 12 | Support Information Security with Organizational Policies and Programs | 10 |
| Total | 63 |