VERY IMPORTANT!!
WE URGE YOU TO TAKE PCI COMPLIANCE VERY SERIOUSLY! We don't want to scare you, but we do want to make you aware of this very important issue. Please take the time to review this information. It could save you tens of thousands of dollars or more in fines and headaches! PCI DSS compliancy is NOT an option and non-compliance can result in serious penalties and consequences. If your customers enter their credit card information on YOUR website, then IT MUST MUST BE PCI COMPLIANT. We can help you achieve PCI DSS compliance by offering affordable solutions.
Who has to be PCI DSS complaint?
From the world's largest corporations to small Internet stores, compliance with the PCI Data Security Standard (PCI DSS) is vital for all merchants who accept credit cards, online or offline, because nothing is more important than keeping your customer's payment card data secure. If cardholder data is stolen, and it's your fault, you could incur fines, penalties, even termination of the right to accept payment cards.
What does PCI DSS compliance mean?
In security terms, it means that your business adheres to the PCI DSS requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. In operational terms, it means that you are playing your role to make sure your customers' payment card data is being kept safe throughout every transaction, and that they, and you, can have confidence that they're protected against the pain and cost of data breaches.
What could happen if your business fails to implement or adhere to PCI DSS compliance rules?
- Lawsuits
- Insurance Claims
- Loss Of Merchant Account
- Increased Merchant Account Fees
- Hefty Card Provider Fines
- Hefty Government Fines
PCI Security Standards Council
You can visit the PCI SSC at this address: https://www.pcisecuritystandards.org
General Guidelines
The PCI DSS follows common-sense steps that mirror security best practices. There are three steps for adhering to the PCI DSS, which is not a single event, but a continuous, ongoing process.
- First, Assess -- identify cardholder data, take an inventory of your IT assets and business processes for payment card processing, and analyze them for vulnerabilities that could expose cardholder data. (This is usually done by acquiring a questionnaire from your merchant/bank which they provide. This questionnaire will help you in exposing vulnerabilities.)
- Second, Remediate -- fix vulnerabilities and do not store cardholder data unless you need it. (This includes hard copy data and electronic data)
- Third, Report -- compile and submit required remediation validation records (if applicable), and submit compliance reports to the acquiring bank and card brands you do business with. (This is usually done electronically via the scanning company. However, you may also be required to send in paper work.)
Relax..we will help
PCI compliance can seem like a daunting task. However, all parties involved want to help get you compliant so you are taking payments securely. We all benefit when everyone is compliant.
PCI Compliant scans and Certification
We recommend and can assist you with Trust Guard.
PCI compliant Hosting - $75/mo
- Correct security vulnerability issues provided by scanning vendor's report.
Above prices are based on required services for PCI compliance. Additional unforeseen vulnerability issues may have additional costs. (This is usually not the case)