|
Payment Card
Industry Data
Security Standards |
|
Protect Your
Cardholder Data. |
Visa's CISP (Cardholder Information Security Program) and
MasterCard's SDP (Site Data
Protection) programs are
security initiatives that
require merchants to
safeguard card data. Visa
and MasterCard, along with
the other card brands, have
adopted
common industry security
requirements referred to
as the Payment Card Industry
Data Security Standards (PCI
DSS).
Customers and businesses
using electronic forms of
payment expect their
cardholder data to be stored
securely and privately.
PinnaclePay Merchant
Services along with Chase
Paymentech, in partnership
with the Card Brands, data
security firms and national
Issuing Banks, helps educate
its merchants on the basics
of data security and the
mandatory industry
requirements around the
protection of data
throughout the payment
transaction process.
Payment Card
Industry Data Security
Standards (PCI DSS)
The PCI DSS are summarized
below. Detailed standards
are available at
Visa's Cardholder
Information Security Program
Tools & FAQ (select PCI
Data Security Standard under
Document/Resource
Downloads).
Build and Maintain a Secure
Network
1.
Install and maintain a
firewall configuration to
protect data
2.
Do not use vendor-supplied
defaults for system
passwords and other security
parameters
Protect
Cardholder Data
3.
Protect stored data
4.
Encrypt transmission of
cardholders data sensitive
information across public
networks
Maintain a
Vulnerability Management
Program
5.
Use and regularly update
anti-virus software
6.
Develop and maintain secure
systems and applications
Implement
Strong Access Control
Measures
7.
Restrict access to data by
business need-to-know
8.
Assign a unique ID to each
person with computer access
9.
Restrict physical access to
cardholder data
Regularly
Monitor and Test Networks
10.
Track and monitor all access
to network resources and
cardholder data
11.
Regularly test security
systems and processes
Maintain an
Information Security Policy
12.
Maintain a policy that
addresses information
security
|