Pci Dss Data Flow Diagram. It s not uncommon for organizations to underestimate the importance of developing good network diagrams. It s not the most glamorous task yet requirements 1 1 2 and 1 1 3 of the payment card industry data security standard pci dss along with general good security hygiene render it a necessary one.
The purpose of having network and data flow diagrams is so that your organization can fully understand where sensitive assets such as cardholder data exist throughout your network. 5 10 11 17 22. Depending on the complexity of your network and processes you could have one combined network and data flow diagram or you may require multiple diagrams.
Pci security standards council.
Requirement 1 1 2 in the pci dss requires the assessor to validate that a current network diagram with all connections to cardholder data including any wireless networks be available and also ensure that a process is in place to keep the diagram current. Depending on the complexity of your network and processes you could have one combined network and data flow diagram or you may require multiple diagrams. Faq article number 1178 from february 2011. Organisations required to formally assess their compliance must have network and data flow diagram s.
