SECURING FIBRE CHANNEL FABRICS - Brocade

Chapter 9: Compliance and Storage• American Express• Discover Financial Services• JCB internationalThe Data Security Standard (DSS), first established in September2006, defines requirements to help prevent credit card fraud andhacking into credit card management systems. Merchants arerequired to meet minimum security standards. The following describesthe general requirement categories but there are many specificrequirements within each category.Build and maintain a secure network:• Install and maintain a firewall configuration to protect cardholderdata• Do not use vendor-supplied defaults for system passwords andother security parametersProtect cardholder data:• Protect stored cardholder data• Encrypt transmission of cardholder data across open, publicnetworksMaintain a vulnerability management program:• Use and regularly update anti-virus software on all systems commonlyaffected by malware• Develop and maintain secure systems and applicationsImplement strong access control measures:• Restrict access to cardholder data by business need-to-know• Assign a unique ID to each person with computer access• Restrict physical access to cardholder dataRegularly monitor and test networks:• Track and monitor all access to network resources and cardholderdata• Regularly test security systems and processes156 Securing Fibre Channel Fabrics