PCI SSC publishes mapping of PCI DSS v4.0.1 to NIST CSF 2.0
The PCI Security Standards Council published a document mapping PCI DSS v4.0.1 to the NIST Cybersecurity Framework 2.0 to help organizations align security efforts across both frameworks.
- Framework
- PCI DSS
- Who it concerns
- Organizations involved in storing, processing, or transmitting payment data.
What changed?
Each point with the sentence from the source that says it.
The PCI Security Standards Council published a document mapping PCI DSS v4.0.1 to the NIST Cybersecurity Framework 2.0.
The PCI Security Standards Council (PCI SSC) has published a document which maps the PCI Data Security Standard (PCI DSS) v4.0.1 to the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF) 2.0.
The mapping document provides a practical resource for stakeholders to understand how to align security efforts to meet objectives in both PCI DSS and NIST CSF.
The mapping document provides a practical resource for stakeholders to use in understanding how to align security efforts to meet objectives in both PCI DSS and NIST CSF.
PCI DSS and NIST CSF are not interchangeable, and neither one is a replacement for the other.
Because PCI DSS and NIST CSF are intended for different audiences and uses, they are not interchangeable, and neither one is a replacement for the other.
Stakeholders can use the mapping to identify opportunities for control reporting efficiencies and greater alignment between organizational security objectives.
Stakeholders can use this mapping to identify opportunities for control reporting efficiencies and greater alignment between organizational security objectives.
Which policies should you review?
Suggested from the change above. Check the source before you edit.
- Information Security Policy
Review the information security policy to align PCI DSS controls with NIST CSF outcomes using the published mapping document.