{"title":"PCI DSS compliance guide","category":"default","creationDate":1572958080,"content":"
\n

PCI DSS v4.0.1 has been released<\/strong><\/p>\n

PCI DSS v4.0.1<\/a> has replaced v3.2.1. Now, when you assess your compliance, you must use PCI DSS v4.0.1 documents.<\/p>\n

If you already completed a v4.0 document, you do not need to complete the v4.0.1 document. Your v4.0 document is valid until it expires.<\/p>\n<\/div><\/div>\n

The Payment Card Industry Data Security Standard (PCI DSS) is a set of global security standards created by the Payment Card Industry Security Standards Council (PCI SSC) to ensure that every company that collects, processes, stores, or transmits cardholder data maintains a secure cardholder data environment. PCI DSS applies to all entities that accept credit cards or are involved in payment processing, such as payment processors, acquirers, issuers, and service providers.<\/p>\n

This document should be used only for guidance purposes, and should not be taken as definitive advice. You should always consult your acquirer or a PCI DSS Qualified Security Assessor (QSA) for clarification.<\/p>\n

Introduction to PCI DSS<\/h2>\n

PCI DSS, a global standard adopted by the major card schemes (Mastercard, Visa, JCB, Diners, and American Express), defines a set of technical and operational requirements that when implemented correctly, helps you to protect cardholder data, reduce fraud, and minimize the chances of a data breach resulting from malicious attacks. Complying with the requirements helps you to maintain your shopper's trust.<\/p>\n

As mandated by the card schemes, every merchant that accepts credit card payments has to comply with PCI DSS requirements. Even though PCI DSS is not part of any law, the standard is applied globally and it comes with significant penalties and costs for organizations that do not comply with the requirements. These financial consequences include non-compliance assessment fees, legal costs, and costs for forensic investigations, onsite QSA assessments, and security updates.<\/p>\n

Before you continue, it is important to understand that:<\/p>\n