Given the PCI DSS 4.0 compliance deadline, what are three critical considerations to avoid audit failures?
If your company is a merchant, processor, acquirer, issuer, or other related service provider, it must comply with the Payment Card Industry’s Data Security Standard (PCI DSS) mandates or face potentially stiff penalties. Policies are set by the Executive Committee, which includes American Express, Discover Financial Services, JCB International, Mastercard, UnionPay, and VISA, Inc.
PCI DSS version 4.0 introduced sixty-four new requirements, most designed to ensure compliance for cybersecurity by preventing the exposure of customer Personally Identifiable Information (PII). Even if you’re just selling T-shirts on a company website, and even if your credit card company provides transaction tokenization, failure to comply could result in serious consequences.
This whitepaper describes what PCI DSS means for payment data security, where risks reside, what’s required for compliance, and how three critical compliance considerations should not be overlooked to help prevent audit failures, security breaches, brand damage, and litigation.
By reading this white paper, you’ll learn:
By submitting this form, you consent to Qualys' privacy policy.