MondoPal and the PCI-DSS standard
What is the PCI-DSS standard?
The Payment Card Industry (PCI) Security Standards Council is an international conglomerate for the development, improvement, storage, dissemination and ongoing implementation of security standards for protecting account data. This organisation was founded by the main card issuers (Visa, Mastercard, American Express, Discover, JCB). Its objective is to define the best practices that merchants and service providers must follow in order to protect the payment data of cardholders. It is this conglomerate that created the Data Security Standards or DSS.
PCI DSS is a set of business and network security guidelines and best practices adopted by the PCI Security Standards Council to establish a minimum standard of security to protect customer payment card information. This standard applies to all systems, networks, and applications that process, store, or transmit cardholder data, as well as systems used to secure and log access to affected systems.
Is MondoPal PCI-DSS compliant?
Yes, we are. The simplest way for us to be PCI compliant is to never see (or have access to) card data. The payment gateways we are using make this easy for us as they can do the heavy lifting to protect our customers’ card information.
In a nutshell, we are taking payments off site by using gateways that use their own servers to process payments, and therefore we are not transmitting card data ourselves.
By using gateways, a best-in-class hosting provider and clear business policies/best practices, we are in compliance with the 12 core PCI-DSS requirements, across the six PCI standard categories. More information below.
Categories | Core requirements |
---|---|
Build and maintain a secure network |
|
Protect cardholder data |
|
Maintain a vulnerability management program |
|
Implement strong access control measures |
|
Regularly monitor and test networks |
|
Maintain an information security policy |
|
Did this answer your question?