You’ve probably heard about it by now if you’re in business, operate with e-commerce or are a part of any merchant organization. PCI Compliance will be cracking down September 31, 2007 - but just what does that mean to
you?

On the 30th of September this year, a new compliance directive will come into force from the Payment Card Industry (PCI) that will affect each and every business that accepts credit cards around the globe… …Among the directives is a requirement for merchants to secure their networks, both wired and wireless, and to audit their compliance at least once every three months. [Bangkok Post]
As scary as it sounds, here’s the basic concept: Being PCI compliant means that your customer information is safely and securely passing through your business.
Limiting your business’ liability while ensuring secure passage of non-stored data is paramount. Key industry players have gathered to compile and enforce standards in hope that everyone will comply.
The PCI Security Standards Council’s mission is to enhance payment account data security by fostering broad adoption of the PCI Security Standards. The organization was founded by American Express, Discover Financial Services, JCB, MasterCard Worldwide, and Visa International. [PCISecurityStandards]
Many countries and states have already made these rules and practices mandatory, which is basically for our own good.
Two states, Texas and Minnesota, have actually passed laws that go far beyond PCI and state that if a TJ Maxx style breach occurs today, the merchant will have to be financially responsible for replacing all the compromised cards. [Bangkok Post]
But how does one become PCI compliant? SearchCIO has a detailed list of “PCI Myths” where they aim to set the record straight about compliance including: PCI is hard, PCI will make us secure, Encryption is scary, “I don’t take enough credit cards”, and Product “x” will make us compliant.
Whichever approach is taken, businesses are running out of time.
Visa U.S.A. Inc. this month warned large merchants that they will face fines and higher credit card transaction fees unless they fully comply with the Payment Card Industry (PCI) data security standard by Oct. 1. [ComputerWorld]
Throughout the coming weeks we’ll be featuring articles and information regarding PCI compliance, in an effort to educate merchants and acquirers about this standard.
Keep an eye on E-xact’s PCI Blog for updates.
E-xact Transactions Ltd. has been fully compliant with the industry since 2004.
[About - E-xact]