Encrypt transmission of cardholder data 4 across open, public networks Protect all systems against malware 5 and regularly update anti-virus software or programs Develop and maintain secure systems 6 and applications Restrict access to cardholder data by 7 business need to know Identify and authenticate access to 8 system components Restrict physical access to cardholder 9 data and monitor all access to network 10 resources and cardholder data Regularly test security systems and 11 processes Maintain a policy that addresses 12 information security for all personnel Additional PCI DSS Requirements for Appendix A1 Shared Hosting Providers Additional PCI DSS Requirements for Appendix A2 Entities using SSL/early TLS
4 Encrypt transmission of cardholder data across open, public networks 5 Protect all systems against malware and regularly update anti-virus software or programs 6 Develop and maintain secure systems and applications 7 Restrict access to cardholder data by business need to know 8 Identify and authenticate access to system components 9 Restrict physical access to cardholder data 10 and monitor all access to network resources and cardholder data 11 Regularly test security systems and processes 12 Maintain a policy that addresses information security for all personnel Appendix A1 Additional PCI DSS Requirements for Shared Hosting Providers Appendix A2 Additional PCI DSS Requirements for Entities using SSL/early TLS
PCI-DSS-v3_2-AOC-ServiceProviders.docx