Payment Card Industry Data Security Standard (PCI DSS)
Also called: PCI DSS, PCI-DSS
Course: AP® Cybersecurity Shows up in: Unit 5: Securing Applications and Data
The industry standard that regulates how organizations protect payment card information (PCI), such as card numbers and card verification value (CVV) codes.
Appears in the course and exam description (CED): 5.2.A.45.2.A.5
Why it matters in Unit 5
Any store that takes cards handles regulated data and must follow PCI DSS.
Example
An online shop must not store customers’ CVV codes after a payment is approved.
Learn it properly, with a checkpoint 5.2 Protecting Applications and Data: Managerial Controls and Access ControlsGo deeper: the professional references
Security professionals worldwide use these: the NIST glossary (the U.S. government's official security dictionary), MITRE ATT&CK (real attacker techniques), MITRE CWE (software weaknesses) and the internet's own standards (RFCs). They go beyond the AP® course, so use the definition above for the exam.