Introduction

You have determined that your organization needs to comply with the Payment Card Industry (PCI) Data Security Standard (DSS) and, looking at the requirements, you are not sure where to start. Should you jump in and go though the 12 PCI DSS requirements one at a time, ensuring that the requirements are in place, or should you first figure out at what level you need to comply. How will you make sure that your fellow associates are on board with the changes you are proposing so that you can comply with PCI DSS in an efficient manner? How will you make the compliance effort come together? After putting the plan together, how will you ensure that your fellow associates have the training and information in front of them to help keep your company from falling out of compliance? Putting together a comprehensive project plan will allow you to manage your compliance project efficiently and, in the end, achieve PCI DSS compliance.

This chapter will answer your questions about how to achieve compliance. You will learn how to justify putting in the effort and figure out if you need to comply at all. Once you know you have to comply with PCI DSS, we will help you bring all the players to the table to help build and enforce the compliance plan. We will give you tips on how to budget your time and resources so that you can achieve compliance quickly. Once you have your plan in place, you...