The Payment Card Industry Data Security Standard (PCI DSS) is a set of technical and operational requirements established to protect cardholder data. The standards apply to all organizations that store, process or transmit cardholder data. The Payment Card Industry Security Standards Council (PCI SSC) is responsible for managing the security standards, while compliance with the PCI DSS standard is enforced by the payment networks – American Express, Discover, JCB International, MasterCard and Visa. PCI DSS compliance is the merchant's responsibility. The following PIC DSS links provide additional information.
- PCI DSS
- Data Security Dos and Don'ts
- Getting Started with PCI Data Security Standard
- PCI DSS Self-Assessment Questionnaire (SAQ)
- Qualified Security Assessors (QSAs)
- Approved Scanning Vendors (ASVs)
The payment networks, American Express, Discover, MasterCard, and Visa, have their own payment card security standard programs for merchant assistance. Navigate through their weblinks for additional information.
- Site Data Protection (SDP) Mandate
- MasterCard PCI Merchant Education Program
- MasterCard Merchant Requirements