How does the PCI PA-DSS integrate with the PCI Data Security Standard (DSS)?
The requirements for Payment Application Data Security Standard (PA-DSS) are derived from the Payment Card Industry Data Security Standard (PCI DSS). This document details what is required for a merchant to be PCI DSS compliant (and therefore what a payment application must support to facilitate a merchant’s PCI DSS compliance). Traditional PCI DSS compliance may not apply to payment application vendors since most vendors do not store, process, or transmit cardholder data. However, because these payment applications are used by merchants to store, process, and transmit cardholder data, and merchants are required to be PCI DSS compliant, payment applications should facilitate, and not prevent, merchants’ PCI DSS compliance. Just a few of the ways payment applications can prevent a merchant’s compliance are: 1) storage of magnetic stripe data in the merchant’s network after authorization; 2) applications that require merchants to disable other features required by PCI DSS, such as anti-v
Related Questions
- What is the relationship between the PCI Data Security Standard and the Payment Application Data Security Standard (PA-DSS) and PIN Transaction Security (PTS) Device requirements?
- Please remind me of the background to the Payment Card Industry Data Security Standard (PCI DSS)?
- What is the difference between PCI Compliance, PCI DSS and the PCI Data Security Standard?
