PCI DSS

If your company accepts or processes payment cards, the Payment Card Industry Data Security Standard (PCI DSS) applies to you. For companies that store, process, transmit or could affect the security of cardholder data, Weaver conducts data security assessments and assists in complying with stringent PCI DSS standards.

Featured

Trending
Insights & Resources

Webinar

Public Sector Education Webinar: How Government Agencies Can Prepare for Cyber Incidents Before They Happen

Our on-demand session discusses how your government agency can best prepare for cyber incidents. We'll look at ways to harness strategic initiatives currently in play and neutralize the published incidents of impacted organizations.

Podcast

Podcast: Megatrend: Preparing Your Future Workforce

Join Todd Hoffman, Brett Nabors and Morgan Page as they look at strategies for preparing the future workforce in government on Weaver: Government Impact.

Podcast

Podcast: Megatrend: Improving the Constituent Experience

Discover strategies for improving constituent experiences in government services with Todd Hoffman, Brett Nabors and Morgan Page on Weaver: Government Impact.

Executive Resource

Executive Resource Center

Unlock

Does Your Non-Medical Business Need to Comply with HIPAA Requirements?

Weaver's series sheds light on the intricacies of HIPAA compliance for non-medical entities and offers crucial insights that could impact your company’s operations.

Podcast

Podcast: Megatrend: Operating Budget Pressures

Explore effective strategies for managing operating budget pressures in government with Todd Hoffman, Brett Nabors and Morgan Page on Weaver: Government Impact.

Article

Health Care’s Most Recent Cyber Incident Reveals Industry-Wide Vulnerabilities

Change Healthcare was impacted by a cybersecurity incident that breached its information technology network.

Explore all insights

Our Qualified Security Assessors (QSA) can ensure that your organization meets and adheres to the following PCI DSS goals and requirements:

Build and maintain a secure network and systems using firewalls to protect cardholder data, and ensure that vendor-supplied defaults for system passwords and other security parameters are not used.
Protect cardholder data and encrypt its transmission across open, public networks.
Maintain a vulnerability management program with secure systems and applications, plus regular updates to anti-virus software and programs.
Implement strong access control measures by restricting access to cardholder data (both electronic and physical) on a “need to know” basis.
Regularly monitor and test networks and track all access to cardholder data.
Maintain an information security policy that addresses information security for all personnel.

Why comply? And why engage a QSA?

All merchants that accept credit card payments are required to comply with the DSS, even if they have outsourced payment processing. Engaging a QSA can help ensure your company stays in accordance with the contracted terms of your acquirer.
Third-party providers of certain services to merchants may need to assess their own compliance with DSS in order to provide those merchants assurance with regard to the outsourced services.
Compliance with the DSS establishes a solid baseline for security practices as it relates to the cardholder data environment (CDE). The DSS aligns well with other security standards (e.g. ISO 27001, NIST SP 800-53) and can easily be extrapolated across the rest of your organization.

Visit the PCI DSS website for more information on the goals and requirements.