PCI Compliance
More than 340 million computer records containing sensitive personal information have been involved in security breaches in the U.S. since 2005. Now criminals are shifting sights to small merchants because many have lax security for cardholder data. More than 80% of attacks target small merchants.
Compliance with the Payment Card Industry (PCI) Data Security Standard (DSS) is mandatory for all merchants. Any business that honors credit cards as a form of payment is required by the Card Associations to be compliant. From the world's largest corporations to small Internet stores, compliance with the PCI Data Security Standard (PCI DSS) is vital for all merchants who accept credit cards, online or offline, because nothing is more important than keeping your customer's payment card data secure. Merchants are required to take a Self Assessment Questionnaire (SAQ). PCI is mandatory and enforced by the major Payment Card Associatioons: Visa Inc., MasterCard WorldWide, American Express, Discover Financial Services, and JCB International.
Small merchants are prime targets for data thieves. As a merchant, you are responsible for the security of cardholder data and must be careful not to store certain types of data on your systems or the systems of your third party service providers. You are responsible for any damages or liability that may occur as a result of a data security breach or non-compliance with the PCI Data Security Standards.
As your Merchant Service Provider, Petroleum Card Services is required to report to the Associations that you have met all of the compliance requirements. To meet the requirements we have developed the PCS ProGuard Compliance Program.
To become compliant with Petroleum Card Services, visit www.petropci.com and begin reading on the home page and follow the link at the bottom for each step. After reading the policies and procedures you will have the knowledge to answer the required questions on the SAQ. Policies have been written for each requirement of the SAQ and we suggest referring to the policies while taking the SAQ.
PCS values your business and strives to provide our merchants with the highest level of service. PCS is dedicated to assisting in the process to bring you into a compliant status. If you have any questions related to PCI compliance, please contact our compliance department at (866) 427-7297 x295.
For information on skimming prevention:
https://www.pcisecuritystandards.org/documents/skimming_prevention_overview_one_sheet.pdf
Ten Common Myths of PCI DSS:
https://www.pcisecuritystandards.org/documents/PCI%20SSC%20-%20Ten%20Common%20Myths.pdf
PCI DSS Storage Do's and Don'ts:
https://www.pcisecuritystandards.org/documents/PCI%20Data%20Storage%20Dos%20and%20Donts.pdf
PCI DSS Wireless Guidelines:
https://www.pcisecuritystandards.org/documents/pci_dss_wireless_guideline_info_sup.pdf
