View source for PCI Compliance

PCI Compliance involves much more than the software your company uses. It also involves the practices and procedures of your company.

Below are a few of the ways that Fishbowl secures data.

* The Fishbowl database never stores credit card numbers or security codes.
* The {{ModuleOptionsTab|Company|LDAP}} allows integration with an LDAP server. This increases password security by allowing users to log into Fishbowl with their domain password.
* Fishbowl utilizes [[User_Group#Assign access rights to a user|access rights]] to control which users have access to each part of the software.

Below is a list of '''level 4 compliance for your reference'''. PCI compliance is not a federal law, and as such state and local laws may dictate requirements in addition to PCI compliance standards. In all cases, Fishbowl must be used in the appropriate way to maintain compliance with such laws. Remember that Fishbowl is simply a business tool that must be used in harmony with laws and correct processes.

{{Clear}}
{| class="prettytable"
|-
! style="text-align: center;" | '''PCI Requirement'''
! '''Description'''
! style="text-align: center;" | '''Compliance Status <br> (Select One)''' 
! style="text-align: center;" | '''Remediation Date and Actions <br> (if Compliance Status is "No") 
|-
| style="text-align: center;" |  '''1''' 
| Install and maintain a firewall configuration to protect cardholder data.
| style="text-align: center;" | Yes<br>No
|
|-
| style="text-align: center;" |  '''2''' 
| Do not use vendor-supplied defaults for system passwords and other security parameters.
| style="text-align: center;" | Yes<br>No
| 
|-
| style="text-align: center;" |  '''3''' 
| Protect stored cardholder data.
| style="text-align: center;" | Yes<br>No
|
|-
| style="text-align: center;" |  '''4''' 
| Encrypt transmission of cardholder data across open, public networks.
| style="text-align: center;" | Yes<br>No
|
|-
| style="text-align: center;" |  '''5''' 
| Use and regularly update antivirus software.
| style="text-align: center;" | Yes<br>No
| 
|-
| style="text-align: center;" |  '''6''' 
|Develop and maintain secure systems and applications.
| style="text-align: center;" | Yes<br>No
|
|-
| style="text-align: center;" |  '''7''' 
| Restrict access to cardholder data by business need to know.
| style="text-align: center;" | Yes<br>No
|
|-
| style="text-align: center;" |  '''8''' 
|Assign a unique ID to each person with computer access.
| style="text-align: center;" | Yes<br>No
| 
|-
| style="text-align: center;" |  '''9''' 
|Restrict physical access to cardholder data.
| style="text-align: center;" | Yes<br>No
|
|-
| style="text-align: center;" |  '''10''' 
| Track and monitor all access to network resources and cardholder data.
| style="text-align: center;" | Yes<br>No
|
|-
| style="text-align: center;" |  '''11''' 
|Regularly test security systems and processes.
| style="text-align: center;" | Yes<br>No
| 
|-
| style="text-align: center;" |  '''12''' 
|Maintain a policy that addresses information security.
| style="text-align: center;" | Yes<br>No
|
|}
''Data pulled from PCI Compliance website''