What is the Payment Card Industry (PCI) Data Security Standard?

PCI SSC Logo

PCI stands for "The Payment Card Industry Data Security Standard" and is a worldwide information security standard developed by the Payment Card Industry Security Standards Council (PCI SSC).

  • You can visit the The PCI DSS website here
  • You can see VISA Cardholder Information Security Program here

The PCI DSS, a set of comprehensive requirements for enhancing payment account data security, was developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB International, MasterCard Worldwide and Visa Inc. Inc. International, to help facilitate the broad adoption of consistent data security measures on a global basis.

The purpose for creating this standard was to assist businesses and organizations that process card payments in preventing credit card fraud through increased controls around data and its exposure to compromise. The PCI standard applies to all businesses and organizations which hold, process, or pass cardholder information from any card branded with the logo of one of the card brands.

The core of the PCI DSS is a group of principles and accompanying requirements, around which the specific elements of the DSS are organized:

  • Build and Maintain a Secure Network
  • Protect Cardholder Data
  • Maintain a Vulnerability Management Program
  • Implement Strong Access Control Measures
  • Regularly Monitor and Test Networks
  • Maintain an Information Security Policy


For Up to Date PCI Compliance Information and News

PCI Compliance.org provides the most current news and information on the way PCI DSS regulations affect credit companies, retailers, ecommerce web sites and those concerned with protecting data integrity under PCI DSS regulations.

To answer any questions you may have about PCI Compliance and how this affects the way you process credit card transactions contact Jeff Skelton at (888) 444-4727 or email JSkelton@snsbankcard.com