{"id":115,"date":"2016-11-18T23:46:06","date_gmt":"2016-11-18T23:46:06","guid":{"rendered":"https:\/\/www.neroladakis.com\/blog\/?page_id=115"},"modified":"2016-11-19T23:12:32","modified_gmt":"2016-11-19T23:12:32","slug":"compliance","status":"publish","type":"page","link":"https:\/\/www.neroladakis.com\/blog\/evangelos-neroladakis\/compliance\/","title":{"rendered":"Compliance and Regulatory PCI, ISO 9001 &#038; ISO 27001"},"content":{"rendered":"<ul>\n<li><a href=\"http:\/\/www.iso27001security.com\/html\/audit_-_certification.html\">ISMS audit and certification<\/a><\/li>\n<li>Internal Auditor for ISO 27001<\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/ISO27k_ISMS_implementation_and_certification_process_v4_full.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-123\" src=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/ISO27k_ISMS_implementation_and_certification_process_v4_full.jpg\" alt=\"iso27k_isms_implementation_and_certification_process_v4_full\" width=\"1212\" height=\"886\" srcset=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/ISO27k_ISMS_implementation_and_certification_process_v4_full.jpg 1212w, https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/ISO27k_ISMS_implementation_and_certification_process_v4_full-300x219.jpg 300w, https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/ISO27k_ISMS_implementation_and_certification_process_v4_full-768x561.jpg 768w, https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/ISO27k_ISMS_implementation_and_certification_process_v4_full-1024x749.jpg 1024w\" sizes=\"auto, (max-width: 1212px) 100vw, 1212px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/iso-27k.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-119\" src=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/iso-27k.png\" alt=\"iso-27k\" width=\"1274\" height=\"878\" srcset=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/iso-27k.png 1274w, https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/iso-27k-300x207.png 300w, https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/iso-27k-768x529.png 768w, https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/iso-27k-1024x706.png 1024w\" sizes=\"auto, (max-width: 1274px) 100vw, 1274px\" \/><\/a><\/p>\n<ul>\n<li>QMS audit and certification<\/li>\n<li>Internal Auditor for ISO 9001<\/li>\n<\/ul>\n<p><a href=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/9001-pdca-cycle.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-121\" src=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/9001-pdca-cycle.jpg\" alt=\"9001-pdca-cycle\" width=\"523\" height=\"354\" srcset=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/9001-pdca-cycle.jpg 523w, https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/9001-pdca-cycle-300x203.jpg 300w\" sizes=\"auto, (max-width: 523px) 100vw, 523px\" \/><\/a><\/p>\n<p>PCI DSS compliant\u00a0<a href=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-dss-compliant.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-128\" src=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-dss-compliant.png\" alt=\"pci-dss-compliant\" width=\"300\" height=\"157\" \/><\/a><\/p>\n<p>PCI DSS Requirements<\/p>\n<p><a href=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-dss-requirements.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-126\" src=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-dss-requirements.png\" alt=\"pci-dss-requirements\" width=\"650\" height=\"638\" srcset=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-dss-requirements.png 650w, https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-dss-requirements-300x294.png 300w\" sizes=\"auto, (max-width: 650px) 100vw, 650px\" \/><\/a><\/p>\n<p><strong>Secure network<\/strong><\/p>\n<ol start=\"1\">\n<li>A firewall configuration must be installed and maintained<\/li>\n<li>System passwords must be original (not vendor-supplied)<\/li>\n<\/ol>\n<p><strong>Secure cardholder data<\/strong><\/p>\n<ol start=\"3\">\n<li>Stored cardholder data must be protected<\/li>\n<li>Transmissions of cardholder data across public networks must be encrypted<\/li>\n<\/ol>\n<p><strong>Vulnerability management<\/strong><\/p>\n<ol start=\"5\">\n<li>Anti-virus software must be used and regularly updated<\/li>\n<li>Secure systems and applications must be developed and maintained<\/li>\n<\/ol>\n<p><strong>Access control<\/strong><\/p>\n<ol start=\"7\">\n<li>Cardholder data access must be restricted to a business need-to-know basis<\/li>\n<li>Every person with computer access must be assigned a unique ID<\/li>\n<li>Physical access to cardholder data must be restricted<\/li>\n<\/ol>\n<p><strong>Network monitoring and testing<\/strong><\/p>\n<ol start=\"10\">\n<li>Access to cardholder data and network resources must be tracked and monitored<\/li>\n<li>Security systems and processes must be regularly tested<\/li>\n<\/ol>\n<p><strong>Information security<\/strong><\/p>\n<ol start=\"12\">\n<li>A policy dealing with information security must be maintained<\/li>\n<\/ol>\n<h2>PCI DSS Compliance Levels<\/h2>\n<p><a href=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-compliance-levels.png\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-125\" src=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-compliance-levels.png\" alt=\"pci-compliance-levels\" width=\"570\" height=\"210\" srcset=\"https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-compliance-levels.png 570w, https:\/\/www.neroladakis.com\/blog\/wp-content\/uploads\/2016\/11\/pci-compliance-levels-300x111.png 300w\" sizes=\"auto, (max-width: 570px) 100vw, 570px\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>ISMS audit and certification Internal Auditor for ISO 27001 &nbsp; QMS audit and certification Internal Auditor for ISO 9001 PCI DSS compliant\u00a0 PCI DSS Requirements Secure network A firewall configuration must be installed and maintained System passwords must be original (not vendor-supplied) Secure cardholder data Stored cardholder data must be protected Transmissions of cardholder data &hellip; <a href=\"https:\/\/www.neroladakis.com\/blog\/evangelos-neroladakis\/compliance\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Compliance and Regulatory PCI, ISO 9001 &#038; ISO 27001<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":24,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-115","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.neroladakis.com\/blog\/wp-json\/wp\/v2\/pages\/115","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.neroladakis.com\/blog\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.neroladakis.com\/blog\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.neroladakis.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.neroladakis.com\/blog\/wp-json\/wp\/v2\/comments?post=115"}],"version-history":[{"count":6,"href":"https:\/\/www.neroladakis.com\/blog\/wp-json\/wp\/v2\/pages\/115\/revisions"}],"predecessor-version":[{"id":129,"href":"https:\/\/www.neroladakis.com\/blog\/wp-json\/wp\/v2\/pages\/115\/revisions\/129"}],"up":[{"embeddable":true,"href":"https:\/\/www.neroladakis.com\/blog\/wp-json\/wp\/v2\/pages\/24"}],"wp:attachment":[{"href":"https:\/\/www.neroladakis.com\/blog\/wp-json\/wp\/v2\/media?parent=115"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}