Checks / PCI DSS
PCI DSS
PCI DSS compliance checks
The card industry's data security standard for anyone storing, processing or transmitting card data.
22 controls, each a live check with a tamper-evident receipt. Run the whole framework at once from any AI assistant with sebbi_run_framework and framework=pcidss.
- PCI DSS Req.1 - network security controls
- PCI DSS Req.2 - no vendor default passwords
- PCI DSS Req.3 - stored account data protected
- PCI DSS Req.3 - PAN masked when displayed
- PCI DSS Req.3 - cryptographic key management
- PCI DSS Req.4 - encrypt transmission over open nets
- PCI DSS Req.5 - anti-malware protection
- PCI DSS Req.6 - secure systems & software
- PCI DSS Req.6 - security patching current
- PCI DSS Req.6 - change control process
- PCI DSS Req.7 - access on need-to-know
- PCI DSS Req.8 - unique user IDs
- PCI DSS Req.8 - MFA for access
- PCI DSS Req.9 - physical access restricted
- PCI DSS Req.10 - logging & audit trails
- PCI DSS Req.10 - daily log review
- PCI DSS Req.10 - time synchronisation
- PCI DSS Req.11 - vulnerability scanning
- PCI DSS Req.11 - penetration testing
- PCI DSS Req.11 - file integrity monitoring
- PCI DSS Req.12 - information security policy
- PCI DSS Req.12 - incident response plan