Describe the PCI DSS (Payment Card Industry Data Security Standard).?

What will be an ideal response?

The PCI DSS was created by the PCI Security Standards Council to protect credit card data and transactions, and requires network segmentation as part of their security controls. Network segmentation separates the parts of a network that have access to sensitive information from parts that are more vulnerable to compromise. For example, a store's inventory-tracking system, which is used by vendors to manage inventory supplies, should be hosted on a different network segment than the store's payment processing server, where customer cardholder information is collected, stored, and processed. If the store maintains legacy equipment for processes such as human resources or business document creation, these legacy systems should be located on a different segment as well because older technology is more vulnerable to intrusion and compromise.