Skip to main content

💼 12.4.1 Responsibility is established by executive management for the protection of cardholder data and a PCI DSS compliance program.

  • Contextual name: 💼 12.4.1 Responsibility is established by executive management for the protection of cardholder data and a PCI DSS compliance program.

  • ID: /frameworks/pci-dss-v4.0/12/04/01

  • Located in: 💼 12.4 PCI DSS compliance is managed.

Description​

Additional requirement for service providers only.

Includes:

  • Overall accountability for maintaining PCI DSS compliance.
  • Defining a charter for a PCI DSS compliance program and communication to executive management.

Similar​

  • Sections
    • /frameworks/pci-dss-v3.2.1/12/04/01
    • /frameworks/pci-dss-v4.0.1/12/04/01

Similar Sections (Take Policies From)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 PCI DSS v3.2.1 → 💼 12.4.1 Executive management shall establish responsibility for the protection of cardholder data and a PCI DSS compliance program.
💼 PCI DSS v4.0.1 → 💼 12.4.1 Responsibility is established by executive management for the protection of cardholder data and a PCI DSS compliance program.

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
💼 PCI DSS v3.2.1 → 💼 12.4.1 Executive management shall establish responsibility for the protection of cardholder data and a PCI DSS compliance program.
💼 PCI DSS v4.0.1 → 💼 12.4.1 Responsibility is established by executive management for the protection of cardholder data and a PCI DSS compliance program.

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags