Legal Regulations, Compliance, and Investment Solutions

This assignment solution addresses the critical aspects of legal regulations, compliance, and investment strategies within the financial sector. It delves into the Payment Card Industry Data Security Standard (PCI-DSS), elucidating its purpose, the necessity of secure financial transactions, and the safeguarding of cardholder data. The solution outlines the four levels of PCI compliance, categorizing merchants based on their transaction volume and online payment methods. Furthermore, it details the six key principles of PCI-DSS, emphasizing the importance of securing cardholder data, maintaining a secure network, implementing vulnerability management, establishing robust access controls, regularly testing networks, and adhering to a comprehensive security policy. The assignment solution includes references to relevant research, providing a robust understanding of the subject matter.

Running head: LEGAL REG, COMPLIANCE, INVEST
LEGAL REG, COMPLIANCE, INVEST
Name of the Student
Name of the University
Author Note

1LEGAL REG, COMPLIANCE, INVEST
Discussions
Answer 1: The full form of PCI-DSS is Payment Card Industry Data Security Standard is a
extensively accepted set of processes and policies that are intended in order to optimize the
security of the debit, credit and transactions of cash card and safeguard cardholders against
the misuse of their information those are personal (Ahmed, 2018).
Answer 2: the purposes of PCI-DSS are as follows:
 All the transactions should be done through a network that is secure.
 The information of the cardholder must be safeguarded in each repository of storage.
 Each of the system should be secured utilizing an effective software solution (Wilson,
Roman & Beierly, 2018).
 The access to the systems with information and operation should be limited
 The systems that are in place should be frequently tested to make sure that they work
properly and they are up to date
 The policies of security those are formal should be skilled and followed at all times.
Answer 3: There are four levels of compliance of PCI. These include:
 Level 4 merchant: Merchant processes MasterCard or Visa transactions less than 20,000
 Level 3 merchant: Merchant accepts online transactions through Visa or MasterCard up to
20,000-1 million (Blackwell, 2018).
 Level 2 merchant: Merchant processes online transactions through Visa or MasterCard of
1-6 million
 Level 1 merchant: merchant accepts transactions of Visa of over 6 million per year.
Answer 4: The six major principles of PCI-DSS include:
 Safeguard data of cardholder

2LEGAL REG, COMPLIANCE, INVEST
 Construct and maintain a network those are secure
 Maintain a program of vulnerability management
 Deploy strong measures of admission control
 Frequently scrutinize and test networks
 Preserve a policy of security of information (Ukidve, SMantha & Tadvalkar, 2017).

3LEGAL REG, COMPLIANCE, INVEST
References
Ahmed, H. U. (2018). PCI DSS 3.2-A Comprehensive Understanding to Effectively Achieve
PCI DSS Compliance.
Blackwell, J. (2018). Best Practices to Obtain and Maintain PCI Compliance.
Ukidve, A., SMantha, D. S., & Tadvalkar, M. (2017). Analysis of payment card industry data
security standard [PCI DSS] compliance by confluence of COBIT 5
framework. International Journal of Engineering Research and Applications, 7(01),
42-48.
Wilson, D., Roman, E., & Beierly, I. (2018). PCI DSS and card brands: Standards,
compliance and enforcement. Cyber Security: A Peer-Reviewed Journal, 2(1), 73-82.