Search
38 articles found
Security
It is an organization aimed at developing, managing, teaching, and raising awareness of security standards in the Card Payments Industry. The PCI Security Standards Council is also an open global forum for data security standards.
Merchant & POS
The PCI Security Standards Council (PCI SSC), founded in 2006 by Amex, Discover, JCB, Mastercard and Visa, has shared its data security and testing standard for accepting contactless payments on smartphones and tablets without extra hardware.
Credit Card
The Payment Card Industry Data Security Standard (PCI DSS) is a technical and operational standard created by the PCI Committee, formed by internationally recognized payment brands, to ensure data security in card payment systems.
Payment Systems
PCI Point of Interaction (POI) was introduced to minimize risk in card transactions. PCI POI Security Requirements cover physical and logical security for both online and offline PIN entry devices (PED) and secure card readers.
HSM & Security
The CPoC standard, issued by the PCI Security Standards Council in 2019, is a data security standard that lets merchants accept contactless payments using a commercial off-the-shelf (COTS) mobile device with NFC.
Merchant & POS
PIN Transaction Security (PTS) verifies that card data and PIN information are used for a payment transaction. It is a set of modular evaluation requirements managed by the PCI Security Standards Council for PIN-accepting terminals.
Security
An external network scan run every 3 months by an Approved Scanning Vendor authorized by card schemes such as MasterCard and Visa, required for PCI DSS compliance. It checks whether merchant systems are protected against external threats.
HSM & Security
PA-DSS (Payment Application Data Security Standard) is the Payment Application Data Security Standard set by the PCI SSC, a global security standard created by the Payment Card Industry Security Standards Council.
Security
A Qualified Security Assessor (QSA) is approved by the PCI Security Standards Council to audit merchants for PCI DSS compliance. The lists of QSA and ASV companies are published on the Council's website.
Security
A Qualified Security Assessor (QSA) is a person approved by the PCI Security Standards Council to audit merchants for compliance with the Payment Card Industry Data Security Standard.
Payment Systems
PA DSS (Payment Application Data Security Standard) is a global security standard created by the PCI SSC. Even if you do not need to comply with it, PA DSS remains a valuable guide for auditing and building secure payment applications.
Security
Published by the PCI SSC, Software-based PIN Entry on COTS (SPoC) is a standard that provides a software-based approach for protecting PIN entry on commercial off-the-shelf devices such as smartphones and tablets.