Any business that processes and stores cardholder data electronically is required to comply with the Payment Card Industry Data Security Standard (PCI DSS). PCI DSS ensures the protection of cardholder data (debit, credit and prepaid cards) by requiring that businesses meet specific security requirements, but the steps an organization must take to demonstrate compliance vary based on the number of transactions processed annually. The security standards span every aspect of an organization’s operation—from business processes to the configuration of the IT infrastructure—and it's important to implement strategies that not only ensure compliance but enable the business to perform at its best within the limits of that security.
A PCI Qualified Security Assessor (QSA) can be engaged by a business to perform a PCI assessment; however, most businesses are not required to use a QSA. TSC can help a business analyze its PCI requirements, navigate what is involved in a self-assessment, or assist with on-site audits.
For more information, contact TSC at info@thesecurityconsortium.net or provide the following information and someone will contact you.