PCI DSS

The world's most widely recognized and most stringent certification for financial institutions

Frequently asked questions about PCI DSS

Frequently asked questions about PCI DSS

Terms & Conditions

活动对象：华为云电销客户及渠道伙伴客户可参与消费满送活动，其他客户参与前请咨询客户经理

活动时间： 2020年8月12日-2020年9月11日

活动期间，华为云用户通过活动页面购买云服务，或使用上云礼包优惠券在华为云官网新购云服务，累计新购实付付费金额达到一定额度，可兑换相应的实物礼品。活动优惠券可在本活动页面中“上云礼包”等方式获取，在华为云官网直接购买（未使用年中云钜惠活动优惠券）或参与其他活动的订单付费金额不计入统计范围内；

Ok
  • What's PCI DSS certification?

    The Payment Card Industry Data Security Standard (PCI DSS) is a set of information security standards for payment cards jointly promoted by five international credit card organizations (including ISA, JCB, and Mastercard).


    The PCI DSS specifies twelve requirements for compliance, organized into six logically related groups: 1) build and maintain secure networks and systems; 2) protect cardholder data; 3) maintain a vulnerability management program; 4) implement strong access control measures; 5) regularly monitor and test networks; 6) maintain an information security policy. Through these, the PCI DSS helps protect the security of cardholder data and sensitive verification data.


    Huawei Cloud has earned PCI DSS level-1 certification (highest level) based on the 3.2.1 version. This certifies Huawei Cloud's ability to protect your sensitive data. Huawei Cloud also provides various products to help you ensure compliance with the PCI DSS standard.


    In addition, Huawei Cloud invites third-party organizations to periodically review its information security management systems based on changing conditions. This enables Huawei Cloud services to always deliver leading data protection capabilities.

  • What organizations or entities need PCI DSS certification?

    PCI DSS certification may be needed for any entity participating in payment card handling, including merchants, processors, receipt agencies, card issuers, and service providers. It may also be needed by entities that store, process, or transmit cardholder data and other sensitive information.


    It is advisable that other entities who do not handle cardholder data but are still involved in relevant activities improve their ability in implementing data protection by conforming to relevant PCI DSS requirements.

  • Which Huawei Cloud services are covered by PCI DSS certification?

    The PCI DSS certification covers over 150 Huawei Cloud services, including but not limited to Advanced Anti-DDoS (AAD), Web Application Firewall (WAF), Data Encryption Workshop (DEW), and Database Security Service (DBSS).


    If you would like to learn more about our products, please contact us.

  • Which of the PCI DSS requirements are intended for me as a cloud service user?

    The PCI DSS specifies 12 requirements for compliance, such as installing and maintaining a firewall configuration to protect cardholder data, and changing vendor-supplied defaults for system passwords and other security parameters. This helps organizations protect the cardholder data they possess.

  • Can my organization become PCI DSS-certified automatically by using Huawei Cloud?

    Huawei Cloud helps you deploy PCI DSS-compliant cloud environments, but using services provided by Huawei Cloud does not certify your organization's compliance with the PCI DSS. If you wish to be certified by PCI DSS, contact a Qualified Security Assessor authorized by the PCI Security Standards Council to evaluate your system. The scope typically covers all components of your system that handles cardholder data.