PA-DSS requirements

Understand how IBM® Safer Payments addresses and fulfills individual PA-DSS requirements and subrequirements.

Requirement 1: Do not retain full track data, card verification code or value (CAV2, CID, CVC2, CVV2), or PIN block data
Details about how requirement 1 and subrequirements 1.1, 1.1.4, and 1.1.5 are fulfilled.
Requirement 2: Protect stored cardholder data
Details about how requirement 2 and subrequirements 2.1, 2.2, 2.3, 2.4, 2.5, and 2.6 are fulfilled.
Requirement 3: Provide secure authentication features
Details about how requirement 3 and subrequirements 3.1, 3.2, 3.3, and 3.4 are fulfilled.
Requirement 4: Log payment application activity
Details about how requirement 4 and subrequirements 4.1, 4.2, 4.3, and 4.4 are fulfilled.
Requirement 5: Develop secure payment applications
Details about how requirement 5 and subrequirements 5.1, 5.2, 5.3, 5.4, 5.5, and 5.6 are fulfilled.
Requirement 6: Protect wireless transmissions
Details about how requirement 6 and subrequirements 6.1, 6.2, and 6.3 are fulfilled.
Requirement 7: Test payment applications to address vulnerabilities and maintain payment application updates
Details about how requirement 7 and subrequirements 7.1, 7.2, and 7.3 are fulfilled.
Requirement 8: Facilitate secure network implementation
Details about how requirement 8 and subrequirements 8.1, 8.2, and 8.3 are fulfilled.
Requirement 9: Cardholder data must never be stored on a server connected to the internet
Details about how requirement 9 and subrequirements 9.1 are fulfilled.
Requirement 10: Facilitate secure remote access to payment application
Details about how requirement 10 and subrequirements 10.1 and 10.2 are fulfilled.
Requirement 11: Encrypt sensitive traffic over public networks
Details about how requirement 11 and subrequirements 11.1 and 11.2 are fulfilled.
Requirement 12: Secure all non-console administrative access
Details about how requirement 12 and subrequirements 12.1 and 12.2 are fulfilled.
Requirement 13: Maintain a PA-DSS Implementation Guide for customers, resellers, and integrators
Details about how requirement 13 and subrequirements 13.1 are fulfilled.
Requirement 14: Assign PA-DSS responsibilities for personnel, and maintain training programs for personnel, customers, resellers, and integrators
Details about how requirement 14 and subrequirements 14.1, 14.2, and 14.3 are fulfilled.