Payment Card Industry (PCI)

PCI DSS stands for PCI Data Security Standard which is a set of comprehensive requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. The purpose of this standard is to help organizations safeguard and protect customer data and credit card information against credit card fraud, hacking and security issues in general.

Any entity that stores, processes, and/or transmits credit card transactions is subject to the PCI DSS compliance requirements. The PCI Security Standards Council classifies participating entities as merchants, service providers, acquirers and trusted third parties. As each payment brand has its own set of compliance requirements for each of the entity classifications, it is important to validate compliance with each payment brand. Overall, the classification depends on annual volume of stored, processed, and/or transmitted credit card transactions per point of sale, i.e. brick-and-mortar and e-commerce.

As part of the compliance process improvement and facilitation, the PCI Security Standards Council defined qualifications for Qualified Security Assessors (QSAs) and Approved Scanning Vendors (ASVs). Enterprise Risk Management is both a certified QSA and ASV. We can assist your organization regarding the PCI Compliance requirements regardless of your services level of complexity. We offer competitive pricing and value packages, tailored to your specific PCI compliance needs.