The thesis is about PCI DSS, which stands for Payment Card Industry Data Security Standard. PCI DSS represents a uniőed approach to the protection of sensitive card data and to prevention of abuses in the payment card industry. Implementation of the standard in the company provides a higher level of security, it maintains conődence, protection against abuse and consequently protection against őnancial losses and loss of reputation. When paying with credit cards, the őrst link in the chain of events is a merchant that accepts payment cards. Right behind the merchant there are diferent types of processors, that process payment cards information. These includes payment processing centers, which are a link between the merchant and the bank. The third link in the chain are the banks which have a contractual relationship with both the cardholder and the merchant, who is willing to accept payment cards. All of these organizations must implement standard PCI DSS in their system if they want to do business with credit cards.
In this thesis we are focused on the implementation of standard PCI DSS in the company of a large merchant. The goal of this thesis is to explore possible solutions for implementation of standard PCI DSS in the company of a large merchant and őnd out if the chosen solution is really the optimum choice. In the őrst part we describe what standard PCI DSS is and what requirements must be met in order to achieve compliance with the standard. We describe the concept of PCI scope and name the reasons why it is necessary to minimize it. In the second part we analyze the possible solutions for the implementation of standard in the company. We described the process of implementing selected solution to the company. We describe the components of the system that are responsible for ensuring compliance with the PCI DSS, which are a product of our own development. Finally, we analyze if the selected solution was really optimal and suggest improvements and measures.
|
