Wednesday, 1 August 2012

Comply with PCI DSS to ensure security of e commerce transactions

By James Richy


If your store accepts credit card payments from customers then it will do you good to know about the PCI DSS. PCI DSS stands for payment card industry data security standard. It is basically a list of rules, norms, guidelines and controls developed to strengthen the e-commerce security system. Everyday millions of credit card transactions take place across the globe and people divulge their credit information to make their payments with the belief that their data is safe with the people with whom they are dealing. Hence it is of paramount importance that those who regularly accept credit cards from customers should follow the rules, controls and measures of PCI DSS.

To reduce the vulnerability of the customers it is advisable for all those who accept process, store and transmit credit card data to follow the guidelines of PCI DSS as laid down by the PCI SSC (payment card industry security standards council).

Compliance with PCI DSS is essential if you regularly process, store and transmit credit and debit card information. The PCI DSS requirements are as follows: installation of firewall configuration in order to maintain vital card holder information and maintain it on a regular basis; you should desist against using vendor supplied defaults for pass words; take steps to protect stored cardholder data; transmission of card holder data across open, public networks should be encrypted; antivirus software should be installed in your system to thwart any malware attack; secure systems and applications should be developed.

You must take steps to restrict physical access to card holder data; it will do you good to test and upgrade your security systems at intervals to make sure that there is no loop hole in the system; it is advisable to draw up a policy to address the security system so that you can effectively deal with any kind of security breaches.

Compliance with PCI DSS is a strict essential if you process, store or transmit credit card information on a regular basis. If you do not comply wit these guidelines then you face the possibility of having to cough up a hefty fine. However, while complying with these norms if you still experience a security breach then you can expect exemption form being fined. Compliance with PCI DSS will ensure that your customer credit information is secure.




About the Author:



No comments:

Post a Comment