 |
 |
 |
 |
 |
 |
 |
 |
 PCI Security Standards Council  |
InfoSafe PCI Compliance Services Get your PCI Compliance taken care of together with your InfoSafe certification. We'll help you get PCI compliant and reach "Safe Harbor" status with the major credit card companies who are enforcing the credit card security regulations. We get it all taken care of for you at one time - quickly and easily. When you become InfoSafe Certified, you'll already meet virtually all the requirements for PCI Certification. You won't have much to do - if anything. We work together with our ASV/QSA certified PCI Compliance partner, SecurityMetrics, who will ultimately provide you with your PCI Compliance validation and certificate. To become certified PCI Compliant with the credit card companies, in addition to other basic security measures that InfoSafe already gives you, you'll need to complete either a full "Site Certification" if you use the Internet or a "No Internet Site Certification" if you do not have an Internet connection or website for your business.
Don't worry about all the details! Your Compliance Specialist with InfoSafe will explain everything to you in easy-to-understand terms, and walk you through the entire process. We make it painless and simple for you. It doesn’t get any easier! Is Site Certification Easy? PCI compliance is easy and can be completed in as few as three simple steps. Site Certification does not require any software installation, software configuration, training or costly maintenance. All your technical support is included and there are no hidden fees. The following diagram shows what steps may be required to be PCI compliant: How you get and stay PCI Compliant
How you become PCI Compliant
Get Enrolled: We help you get enrolled with SecurityMetrics and their PCI certification program. SecrurityMetrics is the Approved Scanning Vendor (ASV) and Qualified Security Assessor (QSA) selected by INVISUS for the InfoSafe PCI Compliance Service. Compliance Checklist: Once registered, the team at SecurityMetrics will walk you through the process of becoming PCI Compliant. This may include:
Validation: Validation of your compliance with PCI Data Security Standards is an important part of your PCI process. This gives your merchant bank (credit card processor) confidence that you are handling your customer’s information securely. Together with SecurityMetrics, we simplify this process for you by providing automatic reporting to your merchant services once you have completed your PCI requirements. If for any reason you are not compliant, we will send you weekly email reminders to complete your compliance checklist. Once you have completed your validation process, your business is certified PCI DSS compliant. SecurityMetrics then provides you with a printable certificate of compliance that we encourage you hang up in your place of business. If you have a website and pass the website scan, you’ll have the option of putting one of SecurityMetrics’ PCI compliant certified logos on your website. This increases consumer confidence in your website and will help generate additional revenue. Annual Renewal: Your PCI certification must be renewed annually. Annually renewing your PCI certification will guarantee that you are always up to date with the most current data security standards, and will help you avoid big fines and penalties for non-compliance. For your convenience, we will notify you via email or phone when it is time for you to renew. Hands on Help:
Learn more about PCI Compliance and who must comply
About PCI Compliance
The last several years have seen an unprecedented assault on personal and financial data that customers have knowingly or unwittingly entrusted to retailers, e-commerce businesses, banks, service providers and credit card companies. Credit card data in particular has been compromised so frequently that calls for government intervention and regulations have become widespread. The payment card industry (PCI) countered the criminal onslaught with its own security initiative that is broader in scope and more specific in its requirements than any measures federal or state government regulation might have imposed. The Payment Card Industry Data Security Standard (PCI-DSS) is a comprehensive security standard that establishes common processes and precautions for handling, processing, storing and transmitting credit card data. In September of 2006, a group of five leading payment brands including American Express, Discover Financial Services, JCB, MasterCard Worldwide and Visa International jointly announced formation of the PCI Security Standards Council, an independent council established to manage ongoing evolution of the PCI standard. PCI compliance is a multifaceted security standard that among other things, includes specific requirements for protection of cardholder data, implementation of a vulnerability management program, regular security testing, access control measures, and the maintaining of an information security policy. Learn more from the PCI Security Standards Council. Who must be PCI Compliant: Any business who accepts, processes, transmits or stores credit/debit card information, including retail, mail or telephone order, and e-commerce. Fines and deadlines for non-compliance vary depending on the Acquiring Bank and credit card companies you accept. Penalties, Fines: Up to $10,000 on first violation for not implementing required safeguards. Visa Fraud Control fines of up to $500,000 per incident for any merchant or service provider that is compromised and not compliant at the time of the incident. Fines and penalties vary depending on the acquiring bank and credit card companies you accept. Benefit for your Business: PCI compliance provides merchants with "Safe Harbor" from the fees and penalties associated with PCI non-compliance and card data compromise. By staying PCI compliant, you are relatively assured that you are following best security practices to prevent a serious security breach that would result in a serious loss of customer confidence in your business. Consumer confidence with credit/debit cards will help you maximize your sales and other revenue opportunities. Benefit for your Customers: Being PCI compliant shows your customers that you care about them and that your business can be trusted with their credit/debit card information. It's critical that consumer confidence be preserved in today's marketplace with skyrocketing credit theft and fraud statistics. |
|
|||||||||||||||||||||||||||||||||||||||||||||||||||||||
