Articles tagged payment processing
12 Practices to Protect Card Data, and What PCI DSS v4.0.1 Asks for Each
The PCI Security Standards Council's twelve data security practices for small merchants, each set against the PCI DSS v4.0.1 requirements that make it specific: password length, patch deadlines, terminal inspections, scans and more.
PCI Compliance 101: What PCI DSS v4.0.1 Is and How You Meet It
The basics of PCI DSS v4.0.1 for a business that takes cards: who it applies to, what counts as in scope, which card data may be stored, how compliance is validated, what changed in v4.x, and what has to happen between assessments.
How iframes Simplify PCI DSS Compliance for E-commerce Businesses
How embedding a payment provider's form in an iframe affects PCI DSS v4.0.1 scope: which SAQ each e-commerce integration leads to, what the SAQ A script criterion asks of an iframe merchant under the Council's FAQ 1588, and what an iframe does not protect.
Storing CVV: What Merchants Need to Know
What PCI DSS v4.0.1 says about the card verification code: it may not be stored once authorisation completes, what is allowed before that, where it tends to hide, and what counts as a CVV and what does not.