Practical Internet of Things Security - Second Edition

PCI DSS

The Payment Card Industry (PCI) Data Security Standard (DSS) has been the primary regulation to which industry stakeholders that process payments must adhere. PCI DSS is published by the PCI Security Standards Council (https://www.pcisecuritystandards.org/), an organization focused on protecting financial accounts and transactional data. 

In order to understand the impact of the IoT on payment processors' abilities to safeguard information, let's first examine the 12 high-level PCI DSS requirements. The following list identifies the 12 requirements, as per the latest standard (see https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf):

• Install and maintain a firewall configuration to protect cardholder data
• Do not use ...