What is PCI DSS?
The Payment Card Industry Data Security Standards (PCI DSS) are a set of 12 requirements developed jointly by Visa, MasterCard, JCB International, Discover and American Express to prevent consumer data theft and reduce online fraud. The PCI DSS represents a multifaceted standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. Compliance and validation of compliance with some or all of the 12 requirements is mandatory for any organization that stores, transmits or processes credit card transactions. • The exact number of requirements (out of the 12) that any one organization need comply with is dependant on that organization’s ‘Validation Type’. An organization’s Validation Type is determined by precisely how that organization handles credit card data. There are 5 such ‘Validation Types’ and every organization will that needs to be PCI compliant will be categorized as one of these typ