PCI-DSS

The Payment Card Industry Data Security Standard, a mandatory security specification for handling credit card data. Core requirements include encrypted transmission, tokenized storage, access control and periodic penetration testing, and it must be built in at the early stage of system design.