PCI Compliance Strategic Plan | How to Become Compliant | PCI DSS
Posted by: Charles Denyer
payment card industry data security standards (PCI DSS), PCI Compliance strategic plan., pci merchant, PCI self assessment questionnaires (SAQ), qualified security assessor (QSA), service provider, third party processer
Need to be Payment Card Industry (PCI) compliant in 2009? Are you a Merchant, Service Provider, Third Party Processor or some other Third Party outsourcing entity involved in the process, storing, or transmitting of payment and creditcard data? If so, listen up, because you need to develop a PCI compliance strategic plan that fits your organization. How so? By following these simple steps.
1. First and foremost, you need to find out exactly what level you fall under for purposes of PCI compliance. Take a quick look at these charts for finding out your transaction volume. When you’ve identified your level, then find out what is required of you.
2. If you need an actual onsite PCI DSS assessment by a Qualified Security Assessor (QSA), then its time to roll up your sleeves and find one. If you can self-assess with a Self-Assessment Questionnaire, known as the “SAQ”, then you may still need some guidance from a QSA; it all depends on your comfort level and how much you can accomplish on your own.
3. Good luck. Remember, if you get into a jam, a QSA can always help with your PCI Compliance strategic plan.
Comment
RSS Feed
Email a friend
