The Definitive Guide to PCI DSS Version 4: Documentation, Compliance, and Management

© The Author(s), under exclusive license to APress Media, LLC, part of Springer Nature 2023

A. B. Cooper Jr. et al.The Definitive Guide to PCI DSS Version 4https://doi.org/10.1007/978-1-4842-9288-4_13

13. Support Information Security with Organizational Policies and Programs

Arthur B. Cooper Jr.¹  , Jeff Hall², David Mundhenk³ and Ben Rothke⁴

(1)

Colorado Springs, CO, USA

(2)

Minneapolis, MN, USA

(3)

Austin, TX, USA

(4)

Clifton, NJ, USA

 

Overview

While PCI is centered around protecting cardholder data (CHD), Requirement 12 is central to all data. Requirement 12 is about data and IT governance, which is relevant to any organization.

Everything in Requirement 12 falls into the category of basic information security controls. This includes fundamentals such as ...