Payment Card Industry Data Security Standard (PCI DSS)

In general, no cardholder data should ever be stored unless itƒ??s necessary to meet the needs of the business. Sensitive data on the magnetic stripe or chip must never be stored. ?ÿIf your organization stores PAN, it is crucial to render it unreadable, for instance, [by] obfuscation [or] encryption.

Yes, u must use secure/encrypted channel.

okie. thanks for the info!

One of the control objectives "Protect Cardholder Data" requires <strong>Protect stored cardholder data</strong> and <strong>Encrypt transmission of cardholder data across open, public network</strong>. Just wondering what are the measures/controls to protect and encrypting the data? mind sharing?

if all sensitive data is not supposed to be stored in the servers, means it must be processed in a secured mode?