Compliance Management

PCI council issues guidance to help meet risk assessment piece

The PCI Security Standards Council, the body that manages payment security industries guidelines, on Friday released a methodology for meeting a risk management requirement included in the standard. The "PCI DSS Risk Assessment Guidelines Information Supplement" (PDF) was created to help organizations meet the PCI Data Security Standard's 12.1.2 provision, which mandates the establishment of a "formal process for identifying threats and vulnerabilities that could negatively impact the security of cardholder data."

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.