How to Become PCI Compliant

PCI Compliance

What is PCI Compliance ?

There are 12 categories of the Payment Card Industry PCI DSS requirements that all merchants must meet in order to be considered compliant or they risk financial penalties imposed by the card brands. PCI compliance is important because it reduces the vulnerability of the merchant to data breaches. A business owner can avoid paying expensive monthly PCI non compliance fees on their merchant services account by completing a Self-Assessment Questionnaire (SAQ).

You can complete your SAQ using a Qualified Security Assessor (QSA) such as Security Metrics or Trustwave. QSA companies are independent security organizations that have been qualified by the PCI Security Standards Council to validate an entity’s adherence to PCI DSS.
12 Categories Of PCI DSS Requirements
  1. Install and maintain a firewall configuration to protect cardholder data
  2. Do not use vendor-supplied defaults for system passwords and other security parameters
  3. Protect stored cardholder data
  4. Encrypt the transmission of cardholder data across open, public networks
  5. Use and regularly update anti-virus software or programs
  6. Develop and maintain secure systems and applications
  7. Restrict access to cardholder data by business need to know
  8. Assign a unique ID to each person with computer access
  9. Restrict physical access to cardholder data
  10. Track and monitor all access to network resources and cardholder data
  11. Regularly test security systems and processes
  12. Maintain a policy that addresses information security for all personnel
Please Contact Me
Every merchant account will have to stay compliant by completing a SAQ Self Assessment Questionnaire every year or they will be charged a monthly PCI non compliance fee. PCI monthly & annual fees may still apply to a merchant account based on PCI Tier level of business.