
PCI Readiness Series: PCI Requirement 12
PCI Requirement 12: Maintaining an Information Security Policy When creating an information security policy, an organization must create a policy that addresses information security for all personnel. Let’s emphasize “all” – this policy is not just for the IT department but is for anyone that would/could be involved in some capacity with storing, processing, and transmitting cardholder data. PCI Requirement 12 helps oversee and govern an organization's PCI DSS compliance…