Is your business PCI DSS Compliant?

Is your business PCI DSS Compliant?

PCI-DSS stands for Payment Card Industry (PCI) Data Security Standard (DSS). It’s a proprietary information security standard which must be followed by all organisations that accept credit or debit card payments.
PCI DSS was first introduced to increase control on all cardholder data that is processed in order to prevent card fraud. An annual compliancy check is carried out by an external QSA (Qualified Security Assessor) who will then create a ROC (Report on Compliance) for the company in question.

Does this apply to me?

If you’re a merchant that accepts card payments, then yes – compliancy with the PCI Data Security Standard is essential. Regardless of the size of the company or however many card transitions the business processes, the PCI DSS requirements still apply.

How can I ensure that my business is PCI DSS compliant?

The standard is maintained by PCI SSC (Payment Card Industry Security Standards Council) who have implemented the following 12 requirements for best security practices:
Build and Maintain a Secure Network

1. Install and maintain a firewall configuration to protect cardholder data
2. Do not use vendor-supplied defaults for system passwords and other security parameters

Protect Cardholder Data

3. Protect stored cardholder data
4. Encrypt transmission of cardholder data across open, public networks

Maintain a Vulnerability Management Program

5. Use and regularly update anti-virus software
6. Develop and maintain secure systems and applications

Implement Strong Access Control Measures

7. Restrict access to cardholder data by business need-to-know
8. Assign a unique ID to each person with computer access
9. Restrict physical access to cardholder data

Regularly Monitor and Test Networks

10. Track and monitor all access to network resources and cardholder data
11. Regularly test security systems and processes

Maintain an Information Security Policy

12. Maintain a policy that addresses information security

For a complete overview in regards to PCI DSS, please Click Here to view the official Security Standards Council website.