PCI Compliance - An Overview
PCI Compliance may sound complicated at first, but in reality it is merely an industry security standard for any server that accepts, processes, or stores credit card information. The main purpose with getting your server PCI Compliant is to ensure your server and the information your customers give you, such as credit card information, is kept secure and safe by establishing common processes and precautions for handling, processing, storing and transmitting credit card data.
Should I be concerned?
If your company processes or stores customer credit card information, it needs to comply with the standards set by the Payment Card Industry.
Not only does this ensure the security of your data, but you can proudly display a symbol on your site announcing the fact that you are PCI Compliant to bring a sense of security to your customers.
Validation Enforcement
While non-compliance penalties also vary among major credit card networks, they can be substantial. Participating companies can be barred from processing credit card transactions, higher processing fees can be applied; and in the event of a serious security breach, fines of up to $500,000 can be levied for each instance of non-compliance.
Since compliance validation requirements and enforcement measures are subject to change, merchants and service providers should closely monitor the requirements of all card networks in which they participate.
Related Articles
- PCI Compliance - An Overview
- How do I become PCI Compliant?
- What are the requirements for PCI Compliance?
- What are the different PCI Compliant Merchant Levels?
Resources
- PCI Security Audit Procedures
- PCI Self-Assessment Questionnaire
- PCI Security Scanning Procedures
- PCI Security Standards Council
- Payment Card Industry Approved Scanning Vendors (ASV)
What are the requirements for PCI Compliance?
What is DNS?
What is Dedicated Server Hosting?
How do I become PCI Compliant?
996 Views | No Comments