This standard is organized around 12 core requirements, grouped into six control objectives, which will range from network security to access control, encryption, monitoring, vulnerability management, and security policy governance. The risk-based, defense-in-depth philosophy underlies PCI DSS and drives organizations to deploy robust controls, perform periodic testing, and provide ongoing compliance. In aligning security practices with the PCI DSS, an organization will more than merely meet regulatory obligations; it would guarantee a way to strengthen trust, assure low breach risks, and generally enhance the resilience of payment systems.