Database Security: PCI Compliance and Business Impact Report

This report delves into the critical aspects of database security, with a specific focus on Payment Card Industry (PCI) compliance. It highlights the importance of securing user credentials and adhering to PCI standards to protect sensitive financial data and build customer trust. The report outlines the technical procedures, such as implementing firewalls and other security measures, that organizations use to achieve operational standards. It emphasizes the consequences of non-compliance, including penalties and legal actions, while also detailing the steps required for PCI compliance, such as self-assessment questionnaires and vulnerability scans. Furthermore, the report underscores the positive impact of PCI compliance on business reputation and efficiency, particularly for large-scale retailers, and stresses the role of database administrators in ensuring effective implementation of these security measures to prevent network and physical attacks. The report draws on the provided references to support its findings, offering a comprehensive overview of database security and its implications for businesses.

Running Head: DATABASE SECURITY 1
Database Security
Name of Student
Name of Supervisor
Course Affiliated
Date

DATABASE SECURITY 2
Executive Summary
Technology advancement has brought many changes in business operation. Organizations
have come up with many measures that secure user credentials by implementing vary policies.
The payment card industries are some of the technical procedure taken by the management in
achieving operational standards. Installing firewall and other security measures help in securing
user's credentials. To ensure PCI compliant, one has to analyze the compliance level and make
appropriate actions.

DATABASE SECURITY 3
PCI Compliance
Payment card industry compliances are guidelines followed by Companies or businesses
when paying or accepting payment from customers through the credit and debit cards. PCI
ensures the security of user credential; therefore, customer trust is build guaranteed by protecting
the business from damages caused by information leakage. The main aim of the PCI Security
Standards is to ensure a safe and secure environment for making payment via cards. Thus, all
organizations or businesses are required to conform to the PCI Security Standards in addressing
financial matters. According to Morse, E., & Raval (2008), "adherence to Payment Card Industry
Data Security Standard compliance requirements continues to grow."
First, this policy attracts customers or users from the different part as it builds the
stakeholder trust and hence users can comfortably use their credit cards to make payments
without being worried about the security of their private data. "It's important to protect the data
of your business," this is according to ("The Importance of the PCI DSS: Why You Should Get
Compliant," 2019)
Positive business reputations are associated with the PCI Compliance with the retailers
where the Company manages and secure credit card related data such as Visa, Master card. The
customers end up having high regards for businesses that accept the use of credit cards as their
means of payments and ensure that their data is secure. The PCI compliance plays an essential
role in enhancing the efficiency of the large scale retailers through enabling users and business to
achieve set goals and objectives within the stipulated timeframe ("PCI Compliance," 2012).
PCI Compliance demonstrates that large retailers have made effective use of PCI
compliance as it plays a vital role in facilitating the success of the organization. The database

DATABASE SECURITY 4
administrator should ensure that the PCI compliance is used effectively with primary purpose
preparing different organization in the business to carry out the detection process and the
prevention of the network and the physical attacks which might lead to various risks in the
organization. When the material and the network attacks managed, the large retailers will offer
quality products and services to the customers without having to experience a large number of
obstacles to success.
PCI non-compliance harms business progress. First, it can result in unnecessary penalties.
Customers are excellent by Companies through deduction of money from their card in instances
where customers transfer a large sum of money. Infringement consequences occur as a result of
the data breach; hence, users can lose fund in that process. Credit card users also pay
compensation cost in case the user does not comply with security standards. The bank can also
take legal action against the cardholder in cases of a damaged reputation, which are contrary to
the initial agreement. According to ("Pros and Cons of the Payment Card Data Security Standard
- Law360", 2019), "PCI DSS is not a law or regulation."
To conclude, to meet the PCI Compliance rules, the retailer must observe the following
requirements. The retailer must determine the self-assessment questionnaire that their business
must use to ensure they validate their Company adequately. Secondly, the retailer must ensure
they complete the survey, and they follow the various instructions. It is necessary to obtain
evidence of passing the vulnerability scan and complete the attestation of the compliance.

DATABASE SECURITY 5
References
Morse, E., & Raval, V. (2008). PCI DSS: Payment card industry data security standards in
context. Computer Law & Security Review, 24(6), 540-554. doi:
10.1016/j.clsr.2008.07.001
PCI Compliance. (2012). Network Security, 2012(10), 4. doi: 10.1016/s1353-4858(12)70091-0
Pros And Cons Of The Payment Card Data Security Standard - Law360. (2019). Retrieved from
https://www.law360.com/articles/765601/pros-and-cons-of-the-payment-card-data-
security-standard
The Importance of the PCI DSS: Why You Should Get Compliant. (2019). Retrieved from
https://www.securitymetrics.com/blog/importance-pci-dss-why-you-should-get-
compliant