PCI DSS

If your company accepts or processes payment cards, the Payment Card Industry Data Security Standard (PCI DSS) applies to you. For companies that store, process, transmit or could affect the security of cardholder data, Weaver conducts data security assessments and assists in complying with stringent PCI DSS standards.

Featured

Trending
Insights & Resources

Webinar

Webinar: What AI Won’t Tell You About Deploying AI

We live in a world with constant noise about the different forms of AI, the possibilities of it and how people are utilizing AI in their business. Dive into the complexities of AI deployment.

Executive Resource

Executive Resource Center

Unlock

Questions and Insights for Board Consideration in Q3 2024

Boards and management may want to consider how recent Fed activity, election uncertainty, and emerging ERP considerations will affect their businesses.

Article

Digital Transformation vs. IT Optimization: Understanding the Difference

Leverage digital transformation and IT optimization to drive business success by harnessing contextualized data, streamlining processes and fostering innovation.

Insight Hub

Digital Glossary

This Digital Glossary explains key terms related to automation, cybersecurity, cloud computing and IT innovations. Bookmark this page and come back when you encounter a new word, phrase or abbreviation.

Article

The Security of Learning: PCI Compliance for Higher Education

PCI DSS sets the standard for payment card security in higher education detailing compliance levels, reporting requirements and strategies to protect data.

Article

Defend Your Data! What’s Expected, What Really Happens and What It Means for School District Cybersecurity

Cybersecurity is critically important, especially for school districts. For educators, an understanding of cybersecurity’s best practices cannot be overstated.

Explore all insights

Our Qualified Security Assessors (QSA) can ensure that your organization meets and adheres to the following PCI DSS goals and requirements:

Build and maintain a secure network and systems using firewalls to protect cardholder data, and ensure that vendor-supplied defaults for system passwords and other security parameters are not used.
Protect cardholder data and encrypt its transmission across open, public networks.
Maintain a vulnerability management program with secure systems and applications, plus regular updates to anti-virus software and programs.
Implement strong access control measures by restricting access to cardholder data (both electronic and physical) on a “need to know” basis.
Regularly monitor and test networks and track all access to cardholder data.
Maintain an information security policy that addresses information security for all personnel.

Why comply? And why engage a QSA?

All merchants that accept credit card payments are required to comply with the DSS, even if they have outsourced payment processing. Engaging a QSA can help ensure your company stays in accordance with the contracted terms of your acquirer.
Third-party providers of certain services to merchants may need to assess their own compliance with DSS in order to provide those merchants assurance with regard to the outsourced services.
Compliance with the DSS establishes a solid baseline for security practices as it relates to the cardholder data environment (CDE). The DSS aligns well with other security standards (e.g. ISO 27001, NIST SP 800-53) and can easily be extrapolated across the rest of your organization.

Visit the PCI DSS website for more information on the goals and requirements.