A comparison of the Payment Card Industry data security standard with ISO17799
Robert Rowlingson, Richard Winsborrow · Computer Fraud & Security · 2006
The aim of this paper is to compare and contrast the Payment Card Industry (PCI) Data Security Standard (DSS) with the major existing standard for information security management ISO17799. PCI DSS requires online retailers to implement a comprehensive baseline for information security. It applies to all merchants, service providers and other organizations that store, process, or transmit cardholder data. The widespread adoption of the PCI standard in the payment card industry could influence approaches to, and the uptake of, ISO17799.