FIS faced the challenge of coordinating several simultaneous assessments across its organization and geographic regions. The company addressed this by implementing common templates and a programmed approach to coordination, which included a strong set of policies enforced throughout the organization.
Key takeaways:
- The program to implement and maintain PCI Data Security Standard (PCI DSS) compliance should be permanent and with proper empowerment and oversight
- A PCI DSS program must be in the leadership agenda
Also on the blog: Participation Opportunity: 2020-2021 Brazil Regional Engagement Board