BACKGROUND

What is PCI?

In 2001, VISA and MasterCard each instigated basic levels of credit card security compliance programs, in which both retailers (known as merchants), banks and entities that provided cardholder authentication and authorisation services (known as service providers) were required to demonstrate compliance.

Visa had created CISP (Cardholder Information Security Programme) and MasterCard had created SDP (Site Data Protection). And each security standard placed a heavy burden on both merchants and service providers; as they had to comply with several different programs. Fortunately, by 2004 VISA and MasterCard had set up a joint data security standard known as the Payment Card Industry (PCI) Data Security Standard (DSS), which ...

Get PCI DSS: A Practical Guide to implementing and maintaining compliance, Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.