International
PCI DSS compliance, made simple
The Payment Card Industry Data Security Standard applies to any organisation that stores, processes, or transmits payment card data, regardless of size or transaction volume.
ComplianceDesk gives you 16 pre-built PCI DSS controls, an evidence vault, audit-ready reports, and reminders before anything falls overdue — so proving PCI DSS compliance stops being a spreadsheet exercise.
Every PCI DSS control, organised for you
The real control library ComplianceDesk seeds the moment you activate PCI DSS — 16 controls across 5 categories.
Network Security & Data Protection
- PCI-1.1 Network security controls protect the cardholder data environment
- PCI-1.2 Cardholder data encrypted at rest and in transit
- PCI-1.3 Secure configuration standards applied to all system components
Vulnerability Management
- PCI-2.1 Anti-malware deployed on applicable systems
- PCI-2.2 Secure systems and applications development practices
- PCI-2.3 Vulnerability and patch management programme
Access Control
- PCI-3.1 Access to cardholder data restricted on a need-to-know basis
- PCI-3.2 Unique IDs and multi-factor authentication enforced
- PCI-3.3 Physical access to cardholder data restricted
- PCI-3.4 Cryptographic key management procedures
Monitoring & Testing
- PCI-4.1 Logging and monitoring of access to network resources and cardholder data
- PCI-4.2 Regular security testing performed
- PCI-4.3 File integrity and change-detection monitoring
Information Security Policy
- PCI-5.1 Information security policy maintained for all personnel
- PCI-5.2 Incident response plan for cardholder data breaches
- PCI-5.3 Service provider PCI DSS compliance managed
Frequently asked questions
How many controls does ComplianceDesk track for PCI DSS?
16, organised into 5 categories, ready to assign to an owner as soon as you activate the framework.
Can I track PCI DSS alongside other frameworks?
Yes — most teams activate several frameworks at once. Controls that overlap across frameworks can share the same evidence, so you don't collect the same document twice.
How long does it take to set up PCI DSS in ComplianceDesk?
Activating PCI DSS instantly seeds its full control library. Most teams assign owners and get their first controls moving within a day.
Related guides
Other International frameworks
See your full compliance picture
131 frameworks, one system of record.