Payment Card Industry Data Security Standard Compliance Planning Guide
The Payment Card Industry Data Security Standard Compliance Planning Guide version 1.2 is targeted for merchants that accept payment cards, financial institutions that process payment card transactions, and service providers—third-party companies that provide payment card processing or data storage services. IT solutions for each of these groups must meet all PCI DSS requirements. The guide is intended to augment the IT Compliance Management Guide, which introduces a framework-based approach to creating IT controls as part of your efforts to comply with multiple regulations and standards. This guide also describes Microsoft products and technology solutions that you can use to implement a series of IT controls to help meet PCI DSS requirements, and many other regulatory obligations.