Dear Seniors,

We are a software company which is into financial services based in UK; related to the plastic card based solution network. I have been asked to work on the PCI compliances related to the HR related policies. To brief the PCI complainces, Its a Payment Card Industry ( PCI) standards which are required to be implemented in a software company which are into the plastic card industry. Now in this , there are many policies which has to be coordinated by HR, such as

1. Employee Background Check Policy
2. Roles and Responsibility Policy
3. Acceptable USe Policy
4. Physical Access Policy
5. Security Awareness Policy
6. Media Protection and Management Policy
7. Information Security Policy

Above policies need to be implemented by the next month,. Could anyone suggest from where does we get the related information and the necessary checklist to be maintained for the same. Please provide me some information for the same if any one is aware about it.

Thanks in advance. Awaiting a quick response.

Regards,

Nisha.

From India, Vadodara
Hello friend,

Some of the policy documents can be based on study of links given below:

http://www.ntobjectives.com/datasheets/pcd_manual.pdf
https://www.pcisecuritystandards.org...i_dss_v1-1.pdf
http://www.informationshield.com/pap...quirements.pdf
Payment Card Industry Data Security Standard (PCI DSS) | Information Security & Privacy <link updated to site home> ( Search On Cite | Search On Google )

These will probably cover the security related policies. You may need to develop your owen policy for employee background check - where you can mention that any employee recruited will be thoroughly checked for credentials. There are very good reference check companies AuthBridge and FirstAdvantage are just to name a few. They can suggest the kind of background check suitable for your company.

Hope this will be useful.

Regards
Nishikant

From United States, Greensboro
Hi Nishikant,
Thanks for sharing the informaton on PCI standards. I know its a very comprehensive subject but pelase let me know if you have some standard documented proceudure of PCI. Acutally your reply puts me into a dileama whether have you also worked on the same. ?
Please put in your valuable thoughts if you come across soem other infomation for the same.
Thanks again for sharing information.

From India, Vadodara
Hello, I have no experience of the PCI threfore I regret I am not having any documented procedure. I just thought of giving you ideas for how to approach. Regards Nishikant
From United States, Greensboro
Community Support and Knowledge-base on business, career and organisational prospects and issues - Register and Log In to CiteHR and post your query, download formats and be part of a fostered community of professionals.





Contact Us Privacy Policy Disclaimer Terms Of Service

All rights reserved @ 2024 CiteHR ®

All Copyright And Trademarks in Posts Held By Respective Owners.