PCI Compliances for credit cary industry ( Software Co) - Need Info- Please help

Dear Seniors,

We are a software company which is into financial services based in UK; related to the plastic card based solution network. I have been asked to work on the PCI compliances related to the HR related policies. To brief the PCI complainces, Its a Payment Card Industry ( PCI) standards which are required to be implemented in a software company which are into the plastic card industry. Now in this , there are many policies which has to be coordinated by HR, such as

1. Employee Background Check Policy
2. Roles and Responsibility Policy
3. Acceptable USe Policy
4. Physical Access Policy
5. Security Awareness Policy
6. Media Protection and Management Policy
7. Information Security Policy

Above policies need to be implemented by the next month,. Could anyone suggest from where does we get the related information and the necessary checklist to be maintained for the same. Please provide me some information for the same if any one is aware about it.

Thanks in advance. Awaiting a quick response.

Regards,

Nisha.

Hello friend,

Some of the policy documents can be based on study of links given below:

http://www.ntobjectives.com/datasheets/pcd_manual.pdf
https://www.pcisecuritystandards.org/pdfs/pci_dss_v1-1.pdf
http://www.informationshield.com/papers/PCIStandardPolicyRequirements.pdf
Payment Card Industry Data Security Standard (PCI DSS) | Information Security & Privacy

These will probably cover the security related policies. You may need to develop your owen policy for employee background check - where you can mention that any employee recruited will be thoroughly checked for credentials. There are very good reference check companies AuthBridge and FirstAdvantage are just to name a few. They can suggest the kind of background check suitable for your company.

Hope this will be useful.

Regards
Nishikant

Hi Nishikant,

Thanks for sharing the informaton on PCI standards. I know its a very comprehensive subject but pelase let me know if you have some standard documented proceudure of PCI. Acutally your reply puts me into a dileama whether have you also worked on the same. ?

Please put in your valuable thoughts if you come across soem other infomation for the same.

Thanks again for sharing information.

Hello,

I have no experience of the PCI threfore I regret I am not having any documented procedure. I just thought of giving you ideas for how to approach.

Regards
Nishikant