PCI DSS

PCI DSS- The Payment Card Industry Data Security Standard

The Payment Card Industry Data Security Standard (PCI DSS) was implemented collectively by the Payment Card Industry in response to increased fraud and identity theft involving stolen credit card data in order to stem losses by the card providers and improve consumer confidence. PCI DSS was designed to not only address the most common consumer fears over making credit card transactions, that their cardholder details will be compromised and abused, but also to ensure that the "merchants" who process credit card transactions become more accountable for their own risk.

The key challenges affecting organisations in complying with the PCI DSS include:
  • Identifying the many different means of payment by debit or credit card your organisation offers its customers - these can include EPOS, automated voice payment, online, electronic payment kiosks and by phone through contact centres. All of these different payment methods will have a different impact on achieving compliance with the standard.
  • Identifying the many different areas where payments are being made - most commonly through individual stores/outlets/branches, online, by phone through contact centres, by direct debit, through direct TV channels and by mobile phone. In the public sector, the list will include an even wider range, including schools, theatres, leisure centres, libraries, one-stop-shops and car parks.
  • Identifying how cardholder information is processed within the various systems, the links from the organisation to its acquiring bank, links to other service providers for the processing of financial transactions.
  • Ensuring compliance of applications that are processing financial information(e.g. e-payments via a web-based service)
  • Ongoing security testing of networks and systems to ensure they remain compliant and that any new vulnerabilities are identified and remedial action taken. 

How We Can Help?