Any business that processes and stores cardholder data electronically is required to comply with the Payment Card Industry Data Security Standard (PCI DSS).
PCI DSS ensures the protection of cardholder data (debit, credit and prepaid cards) by requiring that businesses meet specific security requirements, but the steps an organization must take to demonstrate compliance vary based on the number of transactions processed annually. The security standards span every aspect of an organization’s operation—from business processes to the configuration of the IT infrastructure—and it's important to implement strategies that not only ensure compliance, but enable your business to perform at its best within the limits of that security.
A PCI Qualified Security Assessor (QSA) can be engaged by a business to perform a PCI assessment; however, most businesses are not required to use a QSA. TSC can help you analyze your PCI requirements, navigate what is involved in a self-assessment, or assist with on-site audits.
"Working with TSC has been invaluable to White Sky. They not only understand security, but the impact of their choices and recommendations to our business. Particularly, in working with them on PCI DSS compliance, they were able to able to make both short term and long term recommendations that will reduce the cost of meeting our compliance obligations and increase our real security." Ira C. Scharfglass, Senior Vice President, Development, White Sky Inc.
For more information, contact TSC at info@thesecurityconsortium.net or provide the following information and someone will contact you.