PCI DSS Compliance for Merchant’s

The PCI Data Security guide has become the ideal basis for security, it represents years of experience gained by security specialists around the globe. Some of the most well known corporate giants have success with these standards and your small business can also benefit from following the guidelines.

Included in this page are some general outlines for protecting your customers valuable credit card data, the full PCI DSS document is available in a PDF file further down this page.

All of the credit card machines that can be found on this website comply with the Payment Card Industry PIN Transaction and Security Testing and Approval Program Guide which can be downloaded here. The specific Ingenico device models are listed among those tested on the PCI Security Standards official website.

General Points to Remember for Organizing PCI Compliance

 • As we have already addressed above, it is important to only purchase and operate           Approved PIN entry machines at your business.

 • You must also only purchase and use validated software for your online shopping cart       (e-commerce) Seymour Direct recommend you use the added protection of 3D Secure      validated by VISA and Mastercard Securecode.

•  Do not keep records of sensitive card holder information on paper or on computer.

•  Use an adequate Firewall software on your network and PC’s such as the one which comes with Norton 360 Anti-Virus.

•  Make sure your Wireless Router uses encryption and has a strong password, do not use initial password supplied by the vendor.

•  Ensure you use strong passwords on all other hardware and software, criminals/hackers regularly update their knowledge of default passwords.

• Always check PIN devices to make sure nobody has installed foreign software or ‘Skimming’  attachments for cloning cards or capturing card details.

• Educate your staff about these guidelines also, let them know how serious the issue is and that all employees are responsible for protecting customers card details.

• Use the more detailed guidelines included in the PCIDSS document:

               Payment Standard Security V2.0 Document

               Wireless Network Diagram   

In the diagram above we can see that payment security standards must be implemented at all data transferal points where unauthorized access maybe gained over an unsecured network.

PCI DSS – 4 Step Continual Process

• PCI DSS compliance requires that you continually monitor and make an audit checklist in order to identify any cardholder data possessed within your IT assets.  You should also assess your payment processes for vulnerabilities.

• You should fix any vulnerabilities you encounter, card holder data should only be stored if it is truly necessary.

• Finally, you need to compose and submit reports to the acquiring bank or appointed company that administers the PCI compliance.

If you would like to assess yourself to ensure your business is still PCI compliant, there is a useful validation tool in the form of the Self Assessment Questionnaire which can be downloaded here. However, this is for companies who have already undergone an onsite security check with PCI DSS standard procedures.

If you require assurance that you comply Seymour Direct will assist you, call our Freephone helpline or use any of the easy contact methods available onsite!