{"id":1350,"date":"2019-07-24T13:13:40","date_gmt":"2019-07-24T10:13:40","guid":{"rendered":"https:\/\/www.subscreasy.com\/?p=1350"},"modified":"2019-07-24T14:13:25","modified_gmt":"2019-07-24T11:13:25","slug":"internette-guvenli-odemeler-icin-pci-dss","status":"publish","type":"post","link":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/","title":{"rendered":"Internet’te G\u00fcvenli \u00d6demeler i\u00e7in PCI\/DSS"},"content":{"rendered":"

[et_pb_section fb_built=”1″ _builder_version=”3.0.47″ custom_padding=”0|0px|54px|0px|false|false”][et_pb_row _builder_version=”3.0.48″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”][et_pb_column type=”4_4″ _builder_version=”3.0.47″ parallax=”off” parallax_method=”on”][et_pb_text _builder_version=”3.0.74″ background_size=”initial” background_position=”top_left” background_repeat=”repeat”]<\/p>\n

PCI DSS,\u00a0<\/span>Payment Card Industry Data Security Standard<\/strong>\u00a0ifadesinin k\u0131saltmas\u0131 olup, T\u00fcrk\u00e7e\u2019ye \u00d6deme Kartlar\u0131 End\u00fcstrisi Veri G\u00fcvenli\u011fi Standartlar\u0131 olarak ge\u00e7mi\u015ftir. D\u00fcnya genelinde kullan\u0131lan bu standart sayesinde, kart \u00f6demelerinin\u00a0<\/span>g\u00fcvenli\u00a0<\/span><\/strong>bir \u015fekilde yap\u0131lmas\u0131,\u00a0<\/span>sahtecilik\u00a0<\/span><\/strong>ve\u00a0<\/span>doland\u0131r\u0131c\u0131l\u0131k\u00a0<\/span><\/strong>i\u015flemlerine kar\u015f\u0131 etkin bir\u00a0<\/span>koruma<\/strong>\u00a0sa\u011flanmaktad\u0131r. Visa, Master Card, American Express ve JCB\u2019nin yer ald\u0131\u011f\u0131<\/span>\u00a0<\/span>PCI SSC<\/strong>\u00a0ad\u0131 verilen konsey taraf\u0131ndan kurulmu\u015f olan bu sistem teknik ve operasyonel bir sistemdir.<\/span><\/p>\n

PCI DSS, Ocak 2012 tarihi itibari ile 2.0 versiyonuna ge\u00e7mi\u015ftir. 12 gereksinim ve 6 ana ba\u015fl\u0131k alt\u0131nda a\u015fa\u011f\u0131daki gibi gruplanmaktad\u0131r.<\/p>\n

G\u00fcvenli ileti\u015fim a\u011f\u0131n\u0131n olu\u015fturulmas\u0131 ve idamesiyle ilgili gereksinimler<\/strong><\/p>\n

Gereksinim 1
<\/strong>G\u00fcvenlik duvar\u0131n\u0131n kurulumu ve idamesi; Kart sahibi ortamlar\u0131n i\u00e7 ve d\u0131\u015f a\u011flardan ve di\u011fer sistemlerden g\u00fcvenlik duvar\u0131 ve s\u0131k\u0131 eri\u015fim kurallar\u0131 ile ayr\u0131\u015ft\u0131r\u0131lmas\u0131. G\u00fcvenlik duvar\u0131 ve y\u00f6nlendiricilerin y\u00f6netimi ile ilgili s\u00fcre\u00e7lerin tan\u0131mlanarak yaz\u0131l\u0131 hale getirilmesi.<\/p>\n

Gereksinim 2
<\/strong>\u00dcretici taraf\u0131ndan belirlenmi\u015f \u00f6n tan\u0131ml\u0131 kullan\u0131c\u0131 kodu\/parolalar\u0131n ve g\u00fcvenlik parametrelerinin kullan\u0131lmamas\u0131; T\u00fcm sistemlerin kurulum ve yap\u0131land\u0131rma s\u00fcre\u00e7 ve standartlar\u0131n\u0131n end\u00fcstri standartlar\u0131na uygun olarak belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi.<\/p>\n

Kart sahibi bilgilerinin\/verilerinin korunmas\u0131yla ilgili gereksinimler<\/strong><\/p>\n

Gereksinim 3
<\/strong>Depolanan bilginin korunmas\u0131; kart sahibi bilgilerinin g\u00fcvenli olarak i\u015flenmesi, saklanmas\u0131 ve yok edilmesiyle ilgili s\u00fcre\u00e7lerin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. Hassas verilerin do\u011frulama sonras\u0131nda hi\u00e7bir \u015fekilde sistemlerde saklanmamas\u0131. 16 haneli kart numaras\u0131n\u0131n yetkilendirilmi\u015f ki\u015filer d\u0131\u015f\u0131nda tam olarak okunamamas\u0131 ve okunamaz formatta saklanmas\u0131. Kart sahibi verilerinin kriptolu olarak sakland\u0131\u011f\u0131 durumlarda anahtar y\u00f6netimi s\u00fcre\u00e7lerinin belirlenerek yaz\u0131l\u0131 hale getirilmesi.<\/p>\n

Gereksinim 4<\/strong>
Payla\u015f\u0131lan ve a\u00e7\u0131k a\u011flarda, kart sahibinin bilgilerinin \u015fifrelenerek g\u00f6nderilmesi; Kart sahibi verilerinin genel a\u011flar (internet) \u00fczerinden g\u00fcvenli \u015fekilde iletilmesi i\u00e7in s\u00fcre\u00e7lerin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. Son kullan\u0131c\u0131 mesajla\u015fma programlar\u0131yla \u015fifresiz kart sahibi verilerinin iletilmesinin engellenmesi.<\/p>\n

Zafiyet Y\u00f6netimi Program\u0131n\u0131n kurulmas\u0131yla ilgili gereksinimler<\/strong><\/p>\n

Gereksinim 5<\/strong>
Anti-vir\u00fcs yaz\u0131l\u0131m\u0131n kullan\u0131lmas\u0131 ve s\u00fcrekli g\u00fcncellenmesi; Anti-vir\u00fcs yaz\u0131l\u0131mlar\u0131n\u0131n kurulabilece\u011fi t\u00fcm sistemler \u00fczerine kurulmas\u0131, otomatik g\u00fcncelleme, ayarlanm\u0131\u015f tarama, merkezi y\u00f6netim yap\u0131lmas\u0131 ve kay\u0131tlar\u0131n bir y\u0131l s\u00fcreyle saklanmas\u0131.<\/p>\n

Gereksinim 6<\/strong>
G\u00fcvenli sistem ve uygulamalar\u0131n geli\u015ftirilmesi ve bak\u0131m\u0131; Sistem ve uygulamalar\u0131n yama y\u00f6netim, de\u011fi\u015fiklik y\u00f6netim s\u00fcre\u00e7lerinin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. T\u00fcm uygulamalar i\u00e7in geli\u015ftirme, test ve de\u011fi\u015fiklik s\u00fcre\u00e7lerinin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. Uygulama ve de\u011fi\u015fiklikler \u00fczerinde kod analizi yap\u0131lmas\u0131. Web tabanl\u0131 uygulamalarda OWASP\u2019a uygun geli\u015ftirme ve test s\u00fcre\u00e7lerinin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. Internet \u00fczerinden eri\u015filebilen web tabanl\u0131 uygulamalara uygulama zafiyet taramas\u0131 yap\u0131lmas\u0131 veya web uygulama firewall ile korunmas\u0131.<\/p>\n

Kuvvetli eri\u015fim denetimi \u00f6nlemlerinin uygulanmas\u0131yla ilgili gereksinimler<\/strong><\/p>\n

Gereksinim 7<\/strong>
Yaln\u0131z i\u015f i\u00e7in gerekli olan bilgiye eri\u015fim prensibine g\u00f6re eri\u015fimin k\u0131s\u0131tlanmas\u0131 (business need-to-know); Kart sahibi bilgisine eri\u015fimlerin sadece i\u015f ihtiyac\u0131na uygun olarak ve y\u00f6netimin imzal\u0131 onay\u0131yla verilmesi. T\u00fcm eri\u015fimlerin i\u015f gerek ve ihtiya\u00e7lar\u0131 ile s\u0131n\u0131rland\u0131r\u0131lmas\u0131. S\u0131n\u0131rland\u0131rmada otomatik eri\u015fim kontrol\u00fc yap\u0131lmas\u0131 ve \u00f6zellikle izin verilmeyen t\u00fcm eri\u015fimlerin yasaklanmas\u0131.<\/p>\n

Gereksinim 8<\/strong>
Her bilgisayar kullan\u0131c\u0131s\u0131na tek bir kullan\u0131c\u0131 ID atanmas\u0131; T\u00fcm sistemlerdeki kullan\u0131c\u0131 hesaplar\u0131n\u0131n y\u00f6netim s\u00fcre\u00e7lerinin belirlenmesi, uygulanmas\u0131 ve sorumluluklar\u0131n yaz\u0131l\u0131 hale getirilmesi. \u015eifre y\u00f6netimi ve eri\u015fim y\u00f6netimi parametrelerinin uygun \u015fekilde yap\u0131land\u0131r\u0131lmas\u0131.<\/p>\n

Gereksinim 9<\/strong>
<\/span>Kart sahibi bilgisine fiziksel eri\u015fimin k\u0131s\u0131tlanmas\u0131; Kart sahibi bilgisine fiziksel eri\u015fimlerin i\u015f ihtiya\u00e7lar\u0131 ile s\u0131n\u0131rland\u0131r\u0131lmas\u0131. Kart sahibi bilgisine yap\u0131lan fiziksel eri\u015fimlerin izlenmesi ve raporlanmas\u0131. Ziyaret\u00e7i y\u00f6netim s\u00fcrecinin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi.<\/p>\n

D\u00fczenli olarak ileti\u015fim a\u011f\u0131n\u0131n izlenmesi ve test edilmesiyle ilgili gereksinimler<\/strong><\/p>\n

Gereksinim 10<\/strong>
A\u011f kaynaklar\u0131na ve kart sahibi bilgisine eri\u015fimin takibi ve izlenmesi; Kart sahibi bilgisine yap\u0131lan t\u00fcm eri\u015fim ve sorgular\u0131n kaydedilmesi. Yap\u0131lan eri\u015fim ve sorgulardaki kaynak bilgileri ve hangi i\u015flemlerin yap\u0131ld\u0131\u011f\u0131 gibi detaylar\u0131n kaydedilmesi. Sistemler \u00fczerinde ger\u00e7ekle\u015fen \u015f\u00fcpheli i\u015flemleri belirlemek \u00fczere t\u00fcm sistem kay\u0131tlar\u0131n\u0131n g\u00fcnl\u00fck olarak analiz edilmesi. T\u00fcm kay\u0131tlar\u0131n g\u00fcvenli ve de\u011fi\u015ftirilemez olarak 1 y\u0131l s\u00fcreyle saklanmas\u0131.<\/p>\n

Gereksinim 11<\/strong>
G\u00fcvenlik sistemlerin ve s\u00fcre\u00e7lerin d\u00fczenli olarak test edilmesi; T\u00fcm sistemlerin ve kablosuz a\u011flar\u0131n periyodik olarak izlenmesi, test edilmesi ve uygunsuzluklar\u0131n giderilmesi. T\u00fcm sistemlerdeki zafiyetlerin i\u00e7 a\u011f ve d\u0131\u015f a\u011fdan her 3 ayda bir taranmas\u0131. D\u0131\u015f a\u011f taramalar\u0131n\u0131n Yetkili Tarama Sa\u011flay\u0131c\u0131lar\u0131na (ASV) yapt\u0131r\u0131lmas\u0131. Tarama i\u015flemlerinin \u00f6nemli bulgular giderilene kadar tekrarlanmas\u0131. T\u00fcm uygulama ve a\u011flara, i\u00e7 ve d\u0131\u015f a\u011fdan s\u0131zma testi yap\u0131lmas\u0131 ve \u00f6nemli bulgulara kar\u015f\u0131 \u00f6nlemlerin al\u0131nmas\u0131.<\/p>\n

Bilgi G\u00fcvenli\u011fi Politikas\u0131n\u0131n i\u015flerli\u011finin sa\u011flanmas\u0131yla ilgili gereksinim<\/strong><\/p>\n

Gereksinim 12<\/strong>
Bilgi g\u00fcvenli\u011fini adresleyen bir politikan\u0131n bulunmas\u0131; Risk analizi yap\u0131lmas\u0131. Risk analizi sonucuna g\u00f6re bilgi g\u00fcvenli\u011fi dok\u00fcmanlar\u0131n\u0131n haz\u0131rlanmas\u0131 ve uygulamaya al\u0131nmas\u0131. T\u00fcm operasyonel s\u00fcre\u00e7lerin yaz\u0131l\u0131 hale getirilmesi ve uygulanmas\u0131. Servis sa\u011flay\u0131c\u0131lardan al\u0131nan hizmetlerin g\u00fcvenlik ve kalitelerinin \u00f6l\u00e7\u00fcm metotlar\u0131n\u0131n belirlenmesi ve raporlanmas\u0131. Acil durum planlar\u0131n\u0131n olu\u015fturulmas\u0131 ve uygulanmas\u0131.<\/p>\n

 <\/p>\n

[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"

PCI DSS,\u00a0Payment Card Industry Data Security Standard\u00a0ifadesinin k\u0131saltmas\u0131 olup, T\u00fcrk\u00e7e\u2019ye \u00d6deme Kartlar\u0131 End\u00fcstrisi Veri G\u00fcvenli\u011fi Standartlar\u0131 olarak ge\u00e7mi\u015ftir. D\u00fcnya genelinde kullan\u0131lan bu standart sayesinde, kart \u00f6demelerinin\u00a0g\u00fcvenli\u00a0bir \u015fekilde yap\u0131lmas\u0131,\u00a0sahtecilik\u00a0ve\u00a0doland\u0131r\u0131c\u0131l\u0131k\u00a0i\u015flemlerine kar\u015f\u0131 etkin bir\u00a0koruma\u00a0sa\u011flanmaktad\u0131r. Visa, Master Card, American Express ve JCB\u2019nin yer ald\u0131\u011f\u0131\u00a0PCI SSC\u00a0ad\u0131 verilen konsey taraf\u0131ndan kurulmu\u015f olan bu sistem teknik ve operasyonel bir sistemdir. PCI DSS, […]<\/p>\n","protected":false},"author":1,"featured_media":1355,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"on","_et_pb_old_content":"PCI DSS, Ocak 2012 tarihi itibari ile 2.0 versiyonuna ge\u00e7mi\u015ftir. 12 gereksinim ve 6 ana ba\u015fl\u0131k alt\u0131nda a\u015fa\u011f\u0131daki gibi gruplanmaktad\u0131r.\r\n\r\nG\u00fcvenli ileti\u015fim a\u011f\u0131n\u0131n olu\u015fturulmas\u0131 ve idamesi\r\n\r\nGereksinim 1: G\u00fcvenlik duvar\u0131n\u0131n kurulumu ve idamesi; Kart sahibi ortamlar\u0131n i\u00e7 ve d\u0131\u015f a\u011flardan ve di\u011fer sistemlerden g\u00fcvenlik duvar\u0131 ve s\u0131k\u0131 eri\u015fim kurallar\u0131 ile ayr\u0131\u015ft\u0131r\u0131lmas\u0131. G\u00fcvenlik duvar\u0131 ve y\u00f6nlendiricilerin y\u00f6netimi ile ilgili s\u00fcre\u00e7lerin tan\u0131mlanarak yaz\u0131l\u0131 hale getirilmesi.\r\nGereksinim 2: \u00dcretici taraf\u0131ndan belirlenmi\u015f \u00f6n tan\u0131ml\u0131 kullan\u0131c\u0131 kodu\/parolalar\u0131n ve g\u00fcvenlik parametrelerinin kullan\u0131lmamas\u0131; T\u00fcm sistemlerin kurulum ve yap\u0131land\u0131rma s\u00fcre\u00e7 ve standartlar\u0131n\u0131n end\u00fcstri standartlar\u0131na uygun olarak belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi.\r\nKart sahibi bilgilerinin\/verilerinin korunmas\u0131\r\n\r\nGereksinim 3: Depolanan bilginin korunmas\u0131; kart sahibi bilgilerinin g\u00fcvenli olarak i\u015flenmesi, saklanmas\u0131 ve yok edilmesiyle ilgili s\u00fcre\u00e7lerin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. Hassas verilerin do\u011frulama sonras\u0131nda hi\u00e7bir \u015fekilde sistemlerde saklanmamas\u0131. 16 haneli kart numaras\u0131n\u0131n yetkilendirilmi\u015f ki\u015filer d\u0131\u015f\u0131nda tam olarak okunamamas\u0131 ve okunamaz formatta saklanmas\u0131. Kart sahibi verilerinin kriptolu olarak sakland\u0131\u011f\u0131 durumlarda anahtar y\u00f6netimi s\u00fcre\u00e7lerinin belirlenerek yaz\u0131l\u0131 hale getirilmesi.\r\nGereksinim 4: Payla\u015f\u0131lan ve a\u00e7\u0131k a\u011flarda, kart sahibinin bilgilerinin \u015fifrelenerek g\u00f6nderilmesi; Kart sahibi verilerinin genel a\u011flar (internet) \u00fczerinden g\u00fcvenli \u015fekilde iletilmesi i\u00e7in s\u00fcre\u00e7lerin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. Son kullan\u0131c\u0131 mesajla\u015fma programlar\u0131yla \u015fifresiz kart sahibi verilerinin iletilmesinin engellenmesi.\r\nZafiyet Y\u00f6netimi Program\u0131n\u0131n kurulmas\u0131\r\n\r\nGereksinim 5: Anti-vir\u00fcs yaz\u0131l\u0131m\u0131n kullan\u0131lmas\u0131 ve s\u00fcrekli g\u00fcncellenmesi; Anti-vir\u00fcs yaz\u0131l\u0131mlar\u0131n\u0131n kurulabilece\u011fi t\u00fcm sistemler \u00fczerine kurulmas\u0131, otomatik g\u00fcncelleme, ayarlanm\u0131\u015f tarama, merkezi y\u00f6netim yap\u0131lmas\u0131 ve kay\u0131tlar\u0131n bir y\u0131l s\u00fcreyle saklanmas\u0131.\r\nGereksinim 6: G\u00fcvenli sistem ve uygulamalar\u0131n geli\u015ftirilmesi ve bak\u0131m\u0131; Sistem ve uygulamalar\u0131n yama y\u00f6netim, de\u011fi\u015fiklik y\u00f6netim s\u00fcre\u00e7lerinin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. T\u00fcm uygulamalar i\u00e7in geli\u015ftirme, test ve de\u011fi\u015fiklik s\u00fcre\u00e7lerinin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. Uygulama ve de\u011fi\u015fiklikler \u00fczerinde kod analizi yap\u0131lmas\u0131. Web tabanl\u0131 uygulamalarda OWASP\u2019a uygun geli\u015ftirme ve test s\u00fcre\u00e7lerinin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi. Internet \u00fczerinden eri\u015filebilen web tabanl\u0131 uygulamalara uygulama zafiyet taramas\u0131 yap\u0131lmas\u0131 veya web uygulama firewall ile korunmas\u0131.\r\nKuvvetli eri\u015fim denetimi \u00f6nlemlerinin uygulanmas\u0131\r\n\r\nGereksinim 7: Yaln\u0131z i\u015f i\u00e7in gerekli olan bilgiye eri\u015fim prensibine g\u00f6re eri\u015fimin k\u0131s\u0131tlanmas\u0131 (business need-to-know); Kart sahibi bilgisine eri\u015fimlerin sadece i\u015f ihtiyac\u0131na uygun olarak ve y\u00f6netimin imzal\u0131 onay\u0131yla verilmesi. T\u00fcm eri\u015fimlerin i\u015f gerek ve ihtiya\u00e7lar\u0131 ile s\u0131n\u0131rland\u0131r\u0131lmas\u0131. S\u0131n\u0131rland\u0131rmada otomatik eri\u015fim kontrol\u00fc yap\u0131lmas\u0131 ve \u00f6zellikle izin verilmeyen t\u00fcm eri\u015fimlerin yasaklanmas\u0131.\r\nGereksinim 8: Her bilgisayar kullan\u0131c\u0131s\u0131na tek bir kullan\u0131c\u0131 ID atanmas\u0131; T\u00fcm sistemlerdeki kullan\u0131c\u0131 hesaplar\u0131n\u0131n y\u00f6netim s\u00fcre\u00e7lerinin belirlenmesi, uygulanmas\u0131 ve sorumluluklar\u0131n yaz\u0131l\u0131 hale getirilmesi. \u015eifre y\u00f6netimi ve eri\u015fim y\u00f6netimi parametrelerinin uygun \u015fekilde yap\u0131land\u0131r\u0131lmas\u0131.\r\nGereksinim 9: Kart sahibi bilgisine fiziksel eri\u015fimin k\u0131s\u0131tlanmas\u0131; Kart sahibi bilgisine fiziksel eri\u015fimlerin i\u015f ihtiya\u00e7lar\u0131 ile s\u0131n\u0131rland\u0131r\u0131lmas\u0131. Kart sahibi bilgisine yap\u0131lan fiziksel eri\u015fimlerin izlenmesi ve raporlanmas\u0131. Ziyaret\u00e7i y\u00f6netim s\u00fcrecinin belirlenmesi, uygulanmas\u0131 ve yaz\u0131l\u0131 hale getirilmesi.\r\nD\u00fczenli olarak ileti\u015fim a\u011f\u0131n\u0131n izlenmesi ve test edilmesi\r\n\r\nGereksinim 10: A\u011f kaynaklar\u0131na ve kart sahibi bilgisine eri\u015fimin takibi ve izlenmesi; Kart sahibi bilgisine yap\u0131lan t\u00fcm eri\u015fim ve sorgular\u0131n kaydedilmesi. Yap\u0131lan eri\u015fim ve sorgulardaki kaynak bilgileri ve hangi i\u015flemlerin yap\u0131ld\u0131\u011f\u0131 gibi detaylar\u0131n kaydedilmesi. Sistemler \u00fczerinde ger\u00e7ekle\u015fen \u015f\u00fcpheli i\u015flemleri belirlemek \u00fczere t\u00fcm sistem kay\u0131tlar\u0131n\u0131n g\u00fcnl\u00fck olarak analiz edilmesi. T\u00fcm kay\u0131tlar\u0131n g\u00fcvenli ve de\u011fi\u015ftirilemez olarak 1 y\u0131l s\u00fcreyle saklanmas\u0131.\r\nGereksinim 11: G\u00fcvenlik sistemlerin ve s\u00fcre\u00e7lerin d\u00fczenli olarak test edilmesi; T\u00fcm sistemlerin ve kablosuz a\u011flar\u0131n periyodik olarak izlenmesi, test edilmesi ve uygunsuzluklar\u0131n giderilmesi. T\u00fcm sistemlerdeki zafiyetlerin i\u00e7 a\u011f ve d\u0131\u015f a\u011fdan her 3 ayda bir taranmas\u0131. D\u0131\u015f a\u011f taramalar\u0131n\u0131n Yetkili Tarama Sa\u011flay\u0131c\u0131lar\u0131na (ASV) yapt\u0131r\u0131lmas\u0131. Tarama i\u015flemlerinin \u00f6nemli bulgular giderilene kadar tekrarlanmas\u0131. T\u00fcm uygulama ve a\u011flara, i\u00e7 ve d\u0131\u015f a\u011fdan s\u0131zma testi yap\u0131lmas\u0131 ve \u00f6nemli bulgulara kar\u015f\u0131 \u00f6nlemlerin al\u0131nmas\u0131.\r\nBilgi G\u00fcvenli\u011fi Politikas\u0131n\u0131n i\u015flerli\u011finin sa\u011flanmas\u0131\r\n\r\nGereksinim 12: Bilgi g\u00fcvenli\u011fini adresleyen bir politikan\u0131n bulunmas\u0131; Risk analizi yap\u0131lmas\u0131. Risk analizi sonucuna g\u00f6re bilgi g\u00fcvenli\u011fi dok\u00fcmanlar\u0131n\u0131n haz\u0131rlanmas\u0131 ve uygulamaya al\u0131nmas\u0131. T\u00fcm operasyonel s\u00fcre\u00e7lerin yaz\u0131l\u0131 hale getirilmesi ve uygulanmas\u0131. Servis sa\u011flay\u0131c\u0131lardan al\u0131nan hizmetlerin g\u00fcvenlik ve kalitelerinin \u00f6l\u00e7\u00fcm metotlar\u0131n\u0131n belirlenmesi ve raporlanmas\u0131. Acil durum planlar\u0131n\u0131n olu\u015fturulmas\u0131 ve uygulanmas\u0131.","_et_gb_content_width":"","footnotes":""},"categories":[13],"tags":[],"class_list":["post-1350","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog-tr"],"yoast_head":"\nInternet'te G\u00fcvenli \u00d6demeler i\u00e7in PCI\/DSS | Subscreasy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Internet'te G\u00fcvenli \u00d6demeler i\u00e7in PCI\/DSS | Subscreasy\" \/>\n<meta property=\"og:description\" content=\"PCI DSS,\u00a0Payment Card Industry Data Security Standard\u00a0ifadesinin k\u0131saltmas\u0131 olup, T\u00fcrk\u00e7e\u2019ye \u00d6deme Kartlar\u0131 End\u00fcstrisi Veri G\u00fcvenli\u011fi Standartlar\u0131 olarak ge\u00e7mi\u015ftir. D\u00fcnya genelinde kullan\u0131lan bu standart sayesinde, kart \u00f6demelerinin\u00a0g\u00fcvenli\u00a0bir \u015fekilde yap\u0131lmas\u0131,\u00a0sahtecilik\u00a0ve\u00a0doland\u0131r\u0131c\u0131l\u0131k\u00a0i\u015flemlerine kar\u015f\u0131 etkin bir\u00a0koruma\u00a0sa\u011flanmaktad\u0131r. Visa, Master Card, American Express ve JCB\u2019nin yer ald\u0131\u011f\u0131\u00a0PCI SSC\u00a0ad\u0131 verilen konsey taraf\u0131ndan kurulmu\u015f olan bu sistem teknik ve operasyonel bir sistemdir. PCI DSS, […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/\" \/>\n<meta property=\"og:site_name\" content=\"Subscreasy\" \/>\n<meta property=\"article:published_time\" content=\"2019-07-24T10:13:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-07-24T11:13:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.subscreasy.com\/blog\/wp-content\/uploads\/2019\/07\/pci-dss-ile-kart-saklama.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"352\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@subscreasy\" \/>\n<meta name=\"twitter:site\" content=\"@subscreasy\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/\"},\"author\":{\"name\":\"\",\"@id\":\"\"},\"headline\":\"Internet’te G\u00fcvenli \u00d6demeler i\u00e7in PCI\\\/DSS\",\"datePublished\":\"2019-07-24T10:13:40+00:00\",\"dateModified\":\"2019-07-24T11:13:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/\"},\"wordCount\":1054,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/pci-dss-ile-kart-saklama.png\",\"articleSection\":[\"Blog - Subscreasy Abonelik Sistemi\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/\",\"url\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/\",\"name\":\"Internet'te G\u00fcvenli \u00d6demeler i\u00e7in PCI\\\/DSS | Subscreasy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/pci-dss-ile-kart-saklama.png\",\"datePublished\":\"2019-07-24T10:13:40+00:00\",\"dateModified\":\"2019-07-24T11:13:25+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/pci-dss-ile-kart-saklama.png\",\"contentUrl\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/07\\\/pci-dss-ile-kart-saklama.png\",\"width\":1024,\"height\":352},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/internette-guvenli-odemeler-icin-pci-dss\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.subscreasy.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Internet’te G\u00fcvenli \u00d6demeler i\u00e7in PCI\\\/DSS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/\",\"name\":\"Subscreasy\",\"description\":\"24 saatte abonelik \u00fccretlendirme altyap\u0131s\u0131\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/#organization\",\"name\":\"subscrEASY\",\"url\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.subscreasy.com\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/logo-2.ai-4.png\",\"contentUrl\":\"https:\\\/\\\/www.subscreasy.com\\\/wp-content\\\/uploads\\\/2018\\\/05\\\/logo-2.ai-4.png\",\"width\":480,\"height\":480,\"caption\":\"subscrEASY\"},\"image\":{\"@id\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/subscreasy\",\"https:\\\/\\\/www.instagram.com\\\/subscreasycom\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/subscreasy\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCRQtsnOKsny4jo_-AEs-fdQ\"]},{\"@type\":\"Person\",\"@id\":\"\",\"url\":\"https:\\\/\\\/www.subscreasy.com\\\/blog\\\/author\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Internet'te G\u00fcvenli \u00d6demeler i\u00e7in PCI\/DSS | Subscreasy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/","og_locale":"en_US","og_type":"article","og_title":"Internet'te G\u00fcvenli \u00d6demeler i\u00e7in PCI\/DSS | Subscreasy","og_description":"PCI DSS,\u00a0Payment Card Industry Data Security Standard\u00a0ifadesinin k\u0131saltmas\u0131 olup, T\u00fcrk\u00e7e\u2019ye \u00d6deme Kartlar\u0131 End\u00fcstrisi Veri G\u00fcvenli\u011fi Standartlar\u0131 olarak ge\u00e7mi\u015ftir. D\u00fcnya genelinde kullan\u0131lan bu standart sayesinde, kart \u00f6demelerinin\u00a0g\u00fcvenli\u00a0bir \u015fekilde yap\u0131lmas\u0131,\u00a0sahtecilik\u00a0ve\u00a0doland\u0131r\u0131c\u0131l\u0131k\u00a0i\u015flemlerine kar\u015f\u0131 etkin bir\u00a0koruma\u00a0sa\u011flanmaktad\u0131r. Visa, Master Card, American Express ve JCB\u2019nin yer ald\u0131\u011f\u0131\u00a0PCI SSC\u00a0ad\u0131 verilen konsey taraf\u0131ndan kurulmu\u015f olan bu sistem teknik ve operasyonel bir sistemdir. PCI DSS, […]","og_url":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/","og_site_name":"Subscreasy","article_published_time":"2019-07-24T10:13:40+00:00","article_modified_time":"2019-07-24T11:13:25+00:00","og_image":[{"width":1024,"height":352,"url":"https:\/\/www.subscreasy.com\/blog\/wp-content\/uploads\/2019\/07\/pci-dss-ile-kart-saklama.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_creator":"@subscreasy","twitter_site":"@subscreasy","twitter_misc":{"Written by":"","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/#article","isPartOf":{"@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/"},"author":{"name":"","@id":""},"headline":"Internet’te G\u00fcvenli \u00d6demeler i\u00e7in PCI\/DSS","datePublished":"2019-07-24T10:13:40+00:00","dateModified":"2019-07-24T11:13:25+00:00","mainEntityOfPage":{"@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/"},"wordCount":1054,"commentCount":0,"publisher":{"@id":"https:\/\/www.subscreasy.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/#primaryimage"},"thumbnailUrl":"https:\/\/www.subscreasy.com\/blog\/wp-content\/uploads\/2019\/07\/pci-dss-ile-kart-saklama.png","articleSection":["Blog - Subscreasy Abonelik Sistemi"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/","url":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/","name":"Internet'te G\u00fcvenli \u00d6demeler i\u00e7in PCI\/DSS | Subscreasy","isPartOf":{"@id":"https:\/\/www.subscreasy.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/#primaryimage"},"image":{"@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/#primaryimage"},"thumbnailUrl":"https:\/\/www.subscreasy.com\/blog\/wp-content\/uploads\/2019\/07\/pci-dss-ile-kart-saklama.png","datePublished":"2019-07-24T10:13:40+00:00","dateModified":"2019-07-24T11:13:25+00:00","breadcrumb":{"@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/#primaryimage","url":"https:\/\/www.subscreasy.com\/blog\/wp-content\/uploads\/2019\/07\/pci-dss-ile-kart-saklama.png","contentUrl":"https:\/\/www.subscreasy.com\/blog\/wp-content\/uploads\/2019\/07\/pci-dss-ile-kart-saklama.png","width":1024,"height":352},{"@type":"BreadcrumbList","@id":"https:\/\/www.subscreasy.com\/blog\/internette-guvenli-odemeler-icin-pci-dss\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.subscreasy.com\/"},{"@type":"ListItem","position":2,"name":"Internet’te G\u00fcvenli \u00d6demeler i\u00e7in PCI\/DSS"}]},{"@type":"WebSite","@id":"https:\/\/www.subscreasy.com\/blog\/#website","url":"https:\/\/www.subscreasy.com\/blog\/","name":"Subscreasy","description":"24 saatte abonelik \u00fccretlendirme altyap\u0131s\u0131","publisher":{"@id":"https:\/\/www.subscreasy.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.subscreasy.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.subscreasy.com\/blog\/#organization","name":"subscrEASY","url":"https:\/\/www.subscreasy.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.subscreasy.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.subscreasy.com\/wp-content\/uploads\/2018\/05\/logo-2.ai-4.png","contentUrl":"https:\/\/www.subscreasy.com\/wp-content\/uploads\/2018\/05\/logo-2.ai-4.png","width":480,"height":480,"caption":"subscrEASY"},"image":{"@id":"https:\/\/www.subscreasy.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/subscreasy","https:\/\/www.instagram.com\/subscreasycom\/","https:\/\/www.linkedin.com\/company\/subscreasy\/","https:\/\/www.youtube.com\/channel\/UCRQtsnOKsny4jo_-AEs-fdQ"]},{"@type":"Person","@id":"","url":"https:\/\/www.subscreasy.com\/blog\/author\/"}]}},"_links":{"self":[{"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/posts\/1350","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/comments?post=1350"}],"version-history":[{"count":5,"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/posts\/1350\/revisions"}],"predecessor-version":[{"id":1360,"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/posts\/1350\/revisions\/1360"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/media\/1355"}],"wp:attachment":[{"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/media?parent=1350"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/categories?post=1350"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.subscreasy.com\/blog\/wp-json\/wp\/v2\/tags?post=1350"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}