I-Payment Card Industry Data Standard Standard (PCI DSS)
The I-Payment Card Industry Data Standard Standard (PCI DSS) is a isethi yezindinganiso zokuphepha eziklanyelwe ukuqinisekisa ukuthi ZONKE izinkampani ezamukela, ezicubungula, ezigcina, noma ezidlulisa ulwazi lwekhadi lesikweletu zigcina indawo evikelekile. Ngaphezu kwalokho, uma ungumthengisi wanoma imuphi usayizi owamukela amakhadi esikweletu, kufanele uthobelane namazinga oMkhandlu Wokuphepha we-PCI. Le sayithi ihlinzeka ngamadokhumenti ezindinganiso zokuphepha kwedatha yekhadi lesikweletu, isofthiwe nezingxenyekazi zekhompuyutha ezithobela i-PCI, abahloli bezokuphepha abaqeqeshiwe, ukwesekwa kobuchwepheshe, imihlahlandlela yomthengisi, nokuningi.
I-Payment Card Industry (PCI) Data Security Standard (DSS) kanye ne-PCI Approved Scanning Vendors (PCI ASV) zikhona ukuze kuliwe nokukhuphuka kwegagasi lokulahleka kolwazi lwekhadi lesikweletu. kanye nokweba. Zonke izinhlobo ezinhlanu zamakhadi okukhokha amakhulu zisebenza ne-PCI ukuze kuqinisekiswe ukuthi abathengisi nabahlinzeki besevisi bavikela ulwazi lwekhadi lesikweletu lomthengi ngokubonisa ukuthobela i-PCI ngokuhlolwa kokuthobelana kwe-PCI. Thola ukuskena kwe-PCI kuthobelana nokuba sengozini ukuskena ngomthengisi wokuskena ogunyazwe yi-PCI. Imibiko enemininingwane ikhomba izimbobo zokuphepha ezivezwe umthengisi wethu ongu-30,000+. Ihlola futhi iqukethe izincomo zokulungisa ezingenziwa.
Isayithi elisemthethweni le-PCI Security Standards Council:
https://www.pcisecuritystandards.org/
Liyini I-Payment Card Industry Data Standard Standard (PCI-DSS)?
Zitholele izisekelo zokuthobela i-PCI-DSS - funda ukuvikela idatha yekhadi lokukhokha ebucayi, uhlangabezane nezinkombandlela zomkhakha, futhi wenze izinkokhelo ezithobelayo kalula.
I-Payment Card Industry Data Security Standard (PCI-DSS) isethi yezimfuneko zokuphepha zezinkampani ezicubungula, ezigcina, futhi zidlulise ulwazi lwekhadi lesikweletu neledebhithi. Kusebenza kunoma iyiphi inhlangano eyamukela amakhadi okukhokha athintwa izinkampani ezinkulu zamakhadi - i-Visa, i-Mastercard, i-American Express, i-Discover, ne-JCB. Ukuthobelana ne-PCI-DSS kusiza amabhizinisi avikele idatha yekhadi lokukhokha ebucayi ekufinyeleleni okungagunyaziwe lapho ebhekene nezinsongo ze-inthanethi ezihlala zivela.
Iyini i-PCI-DSS?
I-PCI-DSS iyindinganiso yezokuphepha yamazwe ngamazwe ehlose ukuvikela ukucutshungulwa, ukugcinwa, kanye nokudluliswa kwedatha yekhadi lokukhokha. Yakhelwe ukuvikela idatha yekhasimende ebucayi ekukhwabaniseni nakwezinye izinsongo zokuphepha. I-Payment Card Industry Security Standards Council (PCI SSC) isebenzisa izinga futhi isebenza kunoma iyiphi inhlangano edayisayo, egcinayo, ecubungulayo, noma edlulisa ulwazi lwekhadi lesikweletu. Ngenxa yezinhlelo zokuphepha ezibuthakathaka, ukuthobelana nezindinganiso ze-PCI-DSS kusiza amabhizinisi ehlise ingcuphe yemisebenzi yokukhwabanisa, efana nokuntshontshwa kobunikazi nokuvuza kwedatha.
Kungani ukuthobela kwe-PCI-DSS kubalulekile?
Ukuthobela i-PCI-DSS kubalulekile ukuze kuvikelwe idatha yekhasimende ebucayi, futhi cishe wonke amabhizinisi aphethe ulwazi lwekhadi lokukhokha kufanele athobele la mazinga. Ukungathobeli imigomo kungaholela ezinhlawulweni ezinkulu, ukuvezwa kwedatha yomuntu siqu, kanye nesithunzi esilimele. Ukuthobelana kusiza futhi izinhlangano zehlise ubungozi bokukhwabanisa ngokuqinisekisa ukuthi izinhlelo zamakhadi okukhokha zivikeleke ngokuqinile futhi zihambisana nesikhathi.
Yiziphi izingxenye zendinganiso?
The Izinga le-PCI-DSS lihlanganisa izingxenye ezingu-12 eziwumgogodla ezihlanganisa izinqubo nemisebenzi eminingi ehlobene nokuvikela ukuphathwa kwedatha. Lezi zingxenye zihlanganisa ukwakha nokugcina inethiwekhi evikelekile, ukuvikela idatha yomnikazi wekhadi, ukusebenzisa izinyathelo eziqinile zokulawula ukufinyelela, ukuqapha njalo umsebenzi wenethiwekhi namasistimu okuphepha okuhlola, ukusebenzisa izinqubomgomo zokuphepha ezibonakalayo, ukuba nohlelo lokuphendula isigameko, nokulandela izinqubomgomo zokuphepha zolwazi.
Ngingathobela kanjani i-PCI-DSS?
Ukuthobela i-PCI-DSS kuyisinyathelo esinezinyathelo eziningi. Kuhilela ukuthola imihlahlandlela namazinga kuMkhandlu Wezokuphepha we-PCI, ukwakha uhlelo lwakho lokuthobela imithetho nezisombululo ukuze uhlangabezane neziqondiso ezinjalo, ukuhambisa izimpendulo zakho emkhandlwini ukuze zibuyekezwe futhi zigunyazwe, ukuvuselela izinhlelo zokuphepha njalo ukuze zihambisane nezinqubo ezintsha ezihamba phambili nezimakethe, kanye nokuqhubeka nokuqapha noma yiziphi izingozi ezingaba khona ezihlobene nedatha yomnikazi wekhadi ukuyivikela.
Imikhuba ehamba phambili yokugcina ukuthobelana ne-PCI-DSS
Ukugcina ukuthobela kwe-PCI-DSS kudinga umzamo oqhubekayo nokukhuthala. Ezinye izinqubo ezihamba phambili zokuqhubeka nokuthobela zihlanganisa ukudala izinqubomgomo zokuphepha eziphelele; ukusebenzisa amasistimu okugcina, ukucubungula, nokudlulisa idatha yekhadi lesikweletu ngokuphephile; ukubethela idatha yomnikazi wekhadi lapho igcinwe noma idluliswa; ukuhlola njalo izinqubomgomo nezinqubo zokufinyelela idatha; kanye nokuqapha ukuphepha kwenethiwekhi. Lezi zinyathelo zizosiza inhlangano yakho ukuthi ihlale iphezulu ekunqandeni ukuphulwa kwedatha kanye nokugcina ukuthobelana kwe-PCI-DSS ngokuzayo.
Ukuvula Izinzuzo Zokuthobelana kwe-PCI DSS: Ukukhuthaza Ukuvikeleka kanye Nokwakha Trust
Ingabe ukhathazekile ngokuvikeleka kwedatha yamakhasimende akho? Ingabe ukhathazekile ngokuthi ukwephulwa kwedatha kungalimaza isithunzi sakho futhi kucekele phansi ukwethenjwa? Ukuthobela i-PCI DSS kungase kubambe ukhiye wokuthula kwengqondo yakho. Emhlabeni wanamuhla oxhumene, lapho izinsongo ze-inthanethi zivela ngokushaqisayo, ukuvikela ulwazi olubucayi kubaluleke kakhulu kunangaphambili.
Kulesi sihloko, sizohlola izinzuzo zokuthobela i-PCI DSS nokuthi ingakhuphula kanjani izinyathelo zakho zokuphepha futhi yakhe ukwethembana kumakhasimende akho. I-PCI DSS, noma i-Payment Card Industry Data Security Standard, isethi yezinkombandlela eziqinisekisa ukuphathwa ngokuphephile kolwazi lwekhadi lesikweletu. Ngokuthobela lezi zidingo, amabhizinisi anganciphisa kakhulu ingcuphe yokuphulwa kwedatha, azivikele wona kanye namakhasimende awo.
Ukuthobela i-PCI DSS akugcini nje ngokuthuthukisa ukuma kwakho kokuphepha, kodwa futhi kukhulisa ukwethembana kumakhasimende akho. Ngokwazi ukuthi ulwazi lwabo lomuntu siqu kanye nelezezimali luphephile, abathengi kungenzeka bakhethe ibhizinisi lakho kunalabo oqhudelana nabo futhi babe nokuthula kwengqondo lapho besebenza nawe ku-inthanethi noma esitolo.
Hlanganyela nathi njengoba sihlola izinzuzo zokuthobela i-PCI DSS futhi ufunde ukuthi ingayivikela kanjani idatha yakho kuyilapho wakha ukwethembana kumakhasimende akho.
Ukuqonda ukubaluleka kokuthobela i-PCI DSS
Ukwethembela okwandayo kubuchwepheshe kanye nokwenyuka kokuthengiselana nge-inthanethi kwenze amabhizinisi abe sengcupheni yokuphulwa kwedatha nokuhlaselwa nge-inthanethi. Imiphumela yokwephulwa komthetho ingaba yinhlekelele, hhayi nje kuphela mayelana nokulahlekelwa kwezimali kodwa futhi mayelana nokulimala kwesithunzi nokulahlekelwa ukwethenjwa kwamakhasimende. Kulapho ukuthobela kwe-PCI DSS kubaluleka khona.
Ukuthobela i-PCI DSS kunikeza uhlaka olubanzi lwamabhizinisi ukuze avikele idatha yekhadi lawo lokukhokha. Ihlanganisa izici ezihlukahlukene, okuhlanganisa ukuphepha kwenethiwekhi, ukubethelwa kwedatha, ukulawula ukufinyelela, nokuqapha okuvamile. Ngokusebenzisa lezi zinyathelo, amabhizinisi angavikela ulwazi olubucayi lwamakhasimende awo ekufinyeleleni okungagunyaziwe noma ekwebiweni.
Izinzuzo zokuthobela i-PCI DSS
Ukuzuza nokugcina ukuthobela kwe-PCI DSS kuza nezinzuzo ezahlukahlukene zamabhizinisi. Okokuqala, kunciphisa kakhulu ubungozi bokuphulwa kwedatha. Ngokusebenzisa izinyathelo zokuphepha ezishiwo ezingeni, izinkampani zingaqinisa ukuzivikela ezinsongweni ze-inthanethi futhi zivikele idatha yamakhasimende azo.
Ngaphezu kwalokho, ukuthobela i-PCI DSS kuthuthukisa isithunzi sakho futhi kwakha ukwethenjwa kwamakhasimende. Esikhathini samanje sedijithali, abathengi baya ngokuya bazi ngobungozi bokwabelana ngolwazi lwabo lomuntu siqu nelezezimali. Ngokubonisa ukuzibophezela kwakho ekuvikelweni kwedatha ngokuthobela, uqinisekisa amakhasimende akho ukuthi ulwazi lwawo luphephile ezandleni zakho.
Ngaphezu kwalokho, ukuthobela i-PCI DSS kungasiza futhi amabhizinisi ukuthi enze imisebenzi yawo ibe lula. Izinga likhuthaza ukusebenzisa ubuchwepheshe obuvikelekile nezinqubo, ukuthuthukisa ukusebenza kahle, nokunciphisa ubungozi bamaphutha noma ubungozi besistimu. Lokhu, nakho, kungaholela ekongeni kwezindleko kanye nolwazi oluthuthukisiwe lwamakhasimende.
Ungayithobela kanjani i-PCI DSS
Ukuthobela i-PCI DSS kudinga ukuhlela ngokucophelela nokusebenzisa. Inqubo ingase yehluke kuye ngobukhulu nobunkimbinkimbi bebhizinisi lakho, kodwa izinyathelo ezibalulekile azishintshile.
Isinyathelo sokuqala ukuhlola izinyathelo zakho zokuphepha nokuhlonza izikhala noma ubungozi. Lokhu kufaka phakathi ukuhlela kahle amasistimu akho, amanethiwekhi, nezinhlelo zokusebenza eziphatha idatha yekhadi lokukhokha. Ukuqonda ukuthi idatha igeleza kanjani enhlanganweni yakho nalapho igcinwa noma idluliswa khona kubalulekile.
Okulandelayo, kufanele ulungise noma yibuphi ubungozi obubonisiwe futhi usebenzise izilawuli zokuphepha ezidingekayo. Lokhu kungase kuhlanganise ukuthuthukisa amasistimu akho, ukusebenzisa ubuchwepheshe bokubethela, noma ukuthuthukisa ukuhlukaniswa kwenethiwekhi. Kubalulekile ukulandela izimfuneko ezithile ezichazwe kuzinga le-PCI DSS futhi uqinisekise ukuthi zonke izilawuli ezidingekayo ziyasebenza.
Uma izilawuli zokuphepha sezisetshenzisiwe, udinga ukuqinisekisa ukuthobela kwakho ngokuhlola okuphelele. Lokhu kuvame ukubandakanya ukubandakanya uMhloli Ofanelekile Wokuphepha (QSA) noma ukwenza ucwaningo lwangaphakathi kusetshenziswa i-PCI DSS Self-Assessment Questionnaire (SAQ). Ukubuyekeza kuzohlola ukuthobela kwakho izinga futhi kukhombe noma yiziphi izindawo ezidinga ukuthuthukiswa okwengeziwe.
Izidingo ezibalulekile zokuthobela i-PCI DSS
Ukuthobela i-PCI DSS kuqukethe izidingo ezibalulekile eziyishumi nambili okufanele amabhizinisi abambelele kuzo. Lezi zidingo zihlanganisa izici ezihlukahlukene zokuvikeleka kwedatha futhi zinikeza uhlaka olubanzi lokuvikela idatha yekhadi lokukhokha. Ezinye zezidingo ezibalulekile zifaka:
1. Faka futhi ulondoloze ukucushwa kwe-firewall ukuze uvikele idatha yomnikazi wekhadi.
2. Sebenzisa ukubethela okuqinile ukuze uvikele ukudluliswa kwedatha yomnikazi wekhadi kuwo wonke amanethiwekhi omphakathi avulekile.
3. Sebenzisa izilawuli zokufinyelela ukuze ukhawulele ukufinyelela kudatha yomnikazi wekhadi ngokwesidingo sokwazi.
4. Qapha futhi uhlole amanethiwekhi ukuze uhlonze futhi uphendule ekubeni sengozini yezokuphepha noma izinsongo.
Ukuqonda izidingo eziqondile zenhlangano yakho nokuqinisekisa ukuthi zonke izilawuli ezidingekayo zikhona ukuze uhlangabezane nezinga kubalulekile.
Imikhuba emihle kakhulu yokugcina ukuthobela kwe-PCI DSS
Ukuzuza ukuthobelana ne-PCI DSS akuwona umzamo wesikhathi esisodwa kodwa inqubo eqhubekayo. Ukuze kugcinwe ukuthobela umthetho, amabhizinisi kufanele asungule izinqubo zokuphepha eziqinile futhi aqaphe njalo amasistimu awo ukuze athole ubungozi noma ubuthakathaka. Nazi ezinye izinqubo ezihamba phambili zokukusiza ugcine ukuthobela i-PCI DSS:
1. Sebenzisa izibuyekezo ezijwayelekile zokuphepha kanye neziqephu zamasistimu nezinhlelo zakho zokusebenza.
2. Yenza ukuhlolwa okujwayelekile kokuba sengozini kanye nokuhlola ukungena ukuze kuhlonzwe futhi kulungiswe noma yibuphi ubuthakathaka bezokuphepha.
3. Qapha futhi ungene kuwo wonke umsebenzi wesistimu ukuze uthole futhi uphendule emisebenzini esolisayo noma engagunyaziwe.
4. Qeqesha abasebenzi bakho ngezindlela ezingcono kakhulu zokuphepha kwedatha futhi unikeze izinhlelo zokuqwashisa ezivamile ukuze uzazise ngezinsongo zakamuva nokuba sengozini.
Ngokulandela lezi zinqubo ezihamba phambili, amabhizinisi angaqinisekisa ukuthi izinyathelo zawo zokuphepha zihambisana nesikhathi futhi zisebenza ngempumelelo ekuvikeleni idatha yekhadi lokukhokha.
Izinselelo ezijwayelekile ekufezeni nasekugcineni ukuthobelana
Nakuba ukuthobela kwe-PCI DSS kubalulekile ekuvikelekeni kwedatha, kungaba inselele kumabhizinisi ukufinyelela nokuyigcina. Ezinye izinselelo ezijwayelekile zihlanganisa:
1. Ukuba yinkimbinkimbi: Izinga le-PCI DSS lingaba inkimbinkimbi, ikakhulukazi kumabhizinisi amancane anezinsiza ezilinganiselwe kanye nobuchwepheshe bokuphepha kwedatha.
2. Izindleko: Ukusebenzisa izilawuli zokuphepha ezidingekayo kanye nobuchwepheshe kungabiza, ikakhulukazi kumabhizinisi anesabelomali esiqinile.
3. Ububanzi: Ukuthobela i-PCI DSS kudlulela ngalé kwezinhlelo zokucubungula izinkokhelo. Ihlanganisa wonke amasistimu namanethiwekhi aphatha idatha yekhadi lokukhokha, okungaba inselele ukukhomba nokuvikela.
4. Izinsongo eziguqukayo: Izinsongo ze-Cyber zihlala zivela, futhi amabhizinisi kufanele ahlale enolwazi ngezinqubo zakamuva zokuphepha ukuze avikele idatha yawo ngempumelelo kakhulu.
Ukunqoba lezi zinselele kudinga indlela esheshayo yokuphepha kwedatha nokuzibophezela ekuthuthukisweni okuqhubekayo.
Iqhaza lobuchwepheshe ekuzuzeni ukuthobela i-PCI DSS
Ubuchwepheshe budlala indima ebalulekile ekuzuzeni nasekugcineni ukuthobela kwe-PCI DSS. Amabhizinisi kufanele asebenzise amathuluzi alungile nezisombululo ukuze avikele idatha yamakhasimende awo, kusukela emasangweni okukhokha avikelekile kuya kubuchwepheshe bokubethela.
Ubuchwepheshe bokubethela, obufana ne-SSL/TLS, buqinisekisa ukuthi idatha edluliswa phakathi kwesiphequluli sekhasimende neseva ibethelwe futhi ivikelekile. Amasango okukhokha avikelekile ahlinzeka ngendawo ephephile yokucubungula idatha yekhadi lokukhokha, enciphisa ubungozi bokungenela noma ukweba.
Ngaphezu kwalokho, ubuchwepheshe obufana nezinhlelo zokubona nokuvinjelwa (IDPS) nolwazi lwezokuphepha kanye nokuphathwa kwemicimbi (SIEM) zingasiza amabhizinisi ukuthi aqaphe amanethiwekhi nezindlela zemisebenzi esolisayo noma ukwephulwa kwezokuphepha.
Ngokusebenzisa ubuchwepheshe obufanele, amabhizinisi angathuthukisa ukuma kwawo kokuphepha futhi ahlangabezane nezidingo zokuthobela i-PCI DSS ngempumelelo.
Ukwakha ukwethembana namakhasimende ngokuthobela i-PCI DSS
Ukwakha ukwethenjwa kwamakhasimende kubalulekile ukuze uphumelele ebhizinisini lanamuhla eliqhudelanayo. Ukuthobela i-PCI DSS kudlala indima ebalulekile ekukhuthazeni ukwethenjwa ngokuqinisekisa ukuphepha kolwazi olubucayi lwamakhasimende.
Amakhasimende azizwa eqiniseka ngokwengeziwe ukwabelana ngolwazi lwekhadi lawo lesikweletu Uma ebona ibhizinisi elithobela i-PCI DSS. Bayazi ukuthi idatha yabo iphathwa ngokuphephile, futhi inkampani ivikela ubumfihlo babo ngokuqhubekayo.
Ngaphezu kwalokho, ukuthobela i-PCI DSS kukhombisa ukuzibophezela ekuvikelekeni kwedatha kanye nobumfihlo bekhasimende, obungahlukanisa ibhizinisi lakho kulabo oqhudelana nabo. Amakhasimende maningi amathuba okuba akhethe ibhizinisi elibeka phambili ukuphepha nobumfihlo bawo, okuholela ekwenyukeni kokwethembeka nokuphinda ibhizinisi.
Isiphetho: Ukusebenzisa izinzuzo zokuthobela i-PCI DSS
Esikhathini samanje sedijithali, ukuphepha kwedatha kubaluleke kakhulu. Ukuthobela i-PCI DSS kunikeza amabhizinisi uhlaka olubanzi lokuvikela idatha yekhadi lokukhokha nokunciphisa ubungozi bokuphulwa kwedatha. Izinkampani zingajabulela izinzuzo ezihlukahlukene ngokuzuza nokugcina ukuthobelana, okuhlanganisa ukuvikeleka okuthuthukisiwe, ukwethenjwa kwamakhasimende okuthuthukisiwe, kanye nemisebenzi eyenziwe lula.
Nokho, ukufeza nokugcina ukuthobela kwe-PCI DSS kungaba inselele, kudinga ukuhlela ngokucophelela, ukuqaliswa, nokuqapha okuqhubekayo. Ukusebenzisa ubuchwepheshe obufanele kanye nemikhuba emihle kubalulekile ukuze uphumelele.
Sengiphetha, ukuthobela i-PCI DSS akuyona nje imfuneko yokulawula kodwa ukutshalwa kwezimali ekuvikelekeni nesithunzi sebhizinisi lakho. Ngokubeka phambili ukuphepha kwedatha nokubonisa ukuzibophezela kwakho ekuvikeleni ulwazi lwekhasimende, ungavula izinzuzo zokuthobela i-PCI DSS futhi wakhe ukwethembana kumakhasimende akho emhlabeni wanamuhla oxhumene.
Singenye Yezinkampani Ezimbalwa Zobuchwepheshe Eziphethwe Abamnyama Ezisebenza Kuwo Wonke Amazwe angama-50:
Alabama Ala. AL, Alaska Alaska AK, Arizona Ariz. AZ, Arkansas Ark. AR, California Calif. CA, Canal Zone CZ CZ, Colorado Colo. CO, Connecticut Conn. CT, Delaware Del. DE, District of Columbia DC DC, Florida Fla. FL, Georgia Ga. GA, Guam Guam GU, Hawaii Hawaii HI, Idaho Idaho ID, Illinois Ill. IL, Indiana, Ind. IN, Iowa, Iowa IA, Kansas Kan. KS, Kentucky Ky. KY, Louisiana La LA, Maine, Maine ME, Maryland, Md. MD, Massachusetts, Mass. MA, Michigan Mich. MI, Minnesota Minn. MN, Mississippi Miss. MS, Missouri, Mo. MO, Montana, Mont. MT, Nebraska Neb. NE, Nevada Nev. NV, New Hampshire NHNH, New Jersey NJ NJ, New Mexico NMNM, New York NY NY, North Carolina NCNC, North Dakota NDND, Ohio, Ohio OH, Oklahoma, Okla. OK, Oregon Ore. NOMA, Pennsylvania Pa. PA, Puerto Rico PR PR, Rhode Island RI RI, South Carolina SC SC, South Dakota SDSD, Tennessee Tenn. TN, Texas Texas TX, Utah UT, Vermont Vt. VT, Virgin Islands VI VI, Virginia Va. VA, Washington Wash. WA, West Virginia W.Va. WV, Wisconsin Wis. WI, kanye ne-Wyoming Wyo. WY
