PCI DSS
PCI DSS sets technical and operational requirements for protecting payment card data. The particular assessment environment determines the scope.
What is PCI DSS?
PCI DSS stands for Payment Card Industry Data Security Standard. It sets technical and operational requirements for protecting payment card data. Assessment scope depends on how data is stored, processed or transmitted and which systems are relevant. Outsourcing payment processing can reduce the part of the merchant’s environment that needs assessment, but does not automatically remove responsibility for providers and shared tasks.
A fictional puzzle shop plans an external payment page. For launch, the data path, relevant website components and responsibility for changes are to be documented. This includes checking the provider’s compliance evidence for the specific service used and clarifying the shop’s own tasks. The required form of compliance validation is confirmed with the responsible acquirer or relevant payment brand. An external payment page alone does not prove that the shop meets all requirements applicable to it.
Sources
Related terms
- Payment tokenisationFor card payments, a token can replace the card number. Permitted uses depend on the particular token system.
- Payment service providerA PSP supports businesses with electronic payments. Payment methods, processing and additional services depend on the offering.
- AcquiringAcquiring covers accepting and processing card payments on the merchant side. The acquirer has a different role from the card issuer.
- Delivery capabilityDelivery capability describes whether a specific request can be fulfilled. A stock value alone does not fully answer questions of quantity, destination and time.
- Order historyOrder history shows previous orders within an agreed account scope. Old prices, current availability and current processing remain separate information.
- Dealer portalA dealer portal gives affiliated dealers digital access to agreed information and workflows. Its scope and company assignment need to be clear.
Articles on this topic
E-Commerce with ASES
Online shops, marketplaces and B2B portals