Skip to main content

Identify the right PCI requirements for your business




The Payment Card Industry Data Security Standard (PCI DSS) is a security standard developed by the major card brands (Visa®, MasterCard®, Discover®, American Express® and others) to help merchants protect credit cardholder data. Merchants who process credit cards are required to be PCI compliant in order to protect cardholder data. The requirements associated with maintaining PCI compliance vary depending on the size and processing method of the business.  There are four levels, or “tiers,” and each level has its own requirements. Read on to identify which level applies to your business and the steps you can take to achieve compliance for your tier.

What are the “tiers” associated with PCI compliance?

1. Level 1 Merchants:
Level 1 or Tier 1 merchants process over 6 million Visa* transactions annually through all channels (card present, card not present, ecommerce.)  Also, any worldwide merchant that processes a total of 6 million transactions across all regions may cause the entire business to qualify. Merchants who are considered Tier 1 must do the following:

Complete an annual PCI DSS validation through a Qualified Security Assessor (QSA)
Complete a quarterly network scan by an ASV (Approved Scanning Vendor)
Complete the Attestation of Compliance Form​
2. Level 2 Merchants:
Tier 2 merchants process 1 – 6 million Visa transactions annually through all channels (card present, card not present, ecommerce.) Merchants who are considered Tier 2 must do the following:

Complete an Annual Self-Assessment Questionnaire (SAQ)
Complete a quarterly network scan by an ASV (Approved Scanning Vendor)
Complete the Attestation of Compliance Form
3. Level 3 Merchants:
Tier 3 merchants process 20,000 to 1 million Visa transactions annual exclusively via e-commerce processing methods. Merchants who are considered Tier 3 must do the following:

Complete an Annual Self-Assessment Questionnaire (SAQ)
Complete a quarterly network scan by an ASV (Approved Scanning Vendor)
Complete the Attestation of Compliance Form
4. Level 4 Merchants:
Tier 4 merchants process up to 1 million Visa transactions annually through all channels (card present, card not present, ecommerce) and do not process more than 20,000 Visa transactions annually exclusively via ecommerce. Alternatively a merchant processing less than 20,000 Visa transactions annually exclusively via ecommerce will qualify for Tier 4. Merchants who are considered Tier 4 must do the following:

Complete an Annual Self-Assessment Questionnaire (SAQ)
Complete a quarterly network scan by an ASV (Approved Scanning Vendor)
Complete the Attestation of Compliance Form
How do merchants take action?
Merchants can determine where they fall in the PCI compliance tiers through their merchant services provider or the reporting tools provided by said provider. Merchants in tiers 1-3 have more complex compliance requirements because of the size and nature of their business. They are also considerably more likely to have internal IT and compliance teams to implement and monitor their compliance programs. Most merchants who identify as small businesses fall under the tier 4 category. While the compliance requirements may be somewhat simpler, small merchants may find it more challenging to meet them because they do not have internal IT infrastructure. They may feel overwhelmed and unsure where to begin.

Luckily, for Tier 4 merchants, there are many products available at reasonable costs related to their business size. While Tier 1-3 merchants may have to spend quite a lot of money on security and then pay for onsite assessments performed by a Qualified Security Assessor, Tier 4 merchants who actively use a PCI compliance service can get a similar benefit for the size of their business for pennies on the dollar.

Vantiv Integrated Payments offers Merchant SecureAssist®, which is a compliance assistance solution that offers the tools to help merchants achieve and maintain compliance. This solution includes an online “wizard” that guides merchants through the compliance process one step at a time, as well as real-time, point of sale system scans.

#awepay #paymentfraud #artificialintelligence #ai #machinelearning #fraud #frauds #onlinefrauds #fraudprevention #stoppingfraudusingai #stoppingfraud #catchingfraud #ecommerce #ecommercefrauds #ecommerceproducts #product #saas #security #cybersecurity #cybercrime #service #malaysia #startup #tech #techproduct #scifi #payment #team #newarrivals #latesttechnology



Comments

Post a Comment

Popular posts from this blog

12 Startups Utilizing Blockchain Technology in New Ways

Author: Awepay Cryptocurrency created quite the buzz this past year. Although the technology has been around for a few years, 2017 was the year it really took off. Bitcoin, the first application of cryptocurrency technology, hit $20,000 a coin, while coins like Ethereum also saw their prices increase. However, the technology behind these tokens, blockchain, has far more applications than just cryptocurrencies. Through a network of smart contracts that operate utilizing decentralized information on a ledger, blockchain is able to provide unmatched security and speed for data transfers. This means that blockchain technology has an application in nearly every industry where value is exchanged. For this reason, many startups have started to explore how this technology can change the way the world works. Here are twelve of those startups, each of which are utilizing blockchain technology in new ways. Related: 10 Reasons Why Good Customer Service Is Your Most Important Metric ...
6 comments
Read more

4 Trending Digital Payment Methods: Is Your Business Ready For Them?

Businesses and consumers alike are interested in faster, safer, and more convenient payment methods. Are you ready to go digital?   Demographics across the world are shifting. Millennials are now the most diverse and prominent generation in the US population.   As a generation heavily influenced by technology, their buying habits and expectations are all formed via the immediacy that smartphones, Internet, and modern conveniences engender.   Businesses and consumers alike are interested in faster, safer, and more convenient payment methods, as cash is becoming obsolete and credit cards are being phased out. Mobile and social payment options could be the future of millennial-driven purchasing, creating the sort of instant gratification that millennials expect.   Here are a few trending digital payment methods that Millennials will prefer to use in the coming year.     1. Mobile In-Store Payments & Apps...
Post a Comment
Read more

EMV transactions: Is it time for you to upgrade?

Even if your business has not yet adopted an EMV-enabled solution, you’re probably somewhat familiar with the technology since it's among the most talked about developments in payments. EMV has proven to be an effective tool to fight card present payment fraud in Canada and many European countries. While EMV is new to the U.S., payment card fraud is not, with nearly $8.5 billion in fraudulent transactions in the U.S. in 2015 alone. What’s more, the U.S. represents nearly 40 percent of worldwide fraud, despite having less than 25 percent of transaction sales volume. EMV defined So what is EMV? EMV technology is based on specifications developed to ensure worldwide acceptance of secure payments by an organization called EMVCo, a group of leading companies in the payments industry including American Express, Discover, JCB, MasterCard, UnionPay, and Visa and supported by dozens of other companies in the industry. EMV has become the global standard for authenticating credit...
Post a Comment
Read more