Resources for Federal Financial Institutions Examination Council (FFIEC)

PCI Confusion Is the Norm

www.eweek.com

With all of the concern today about retailers inadequately protecting their credit card data, it's logical to assume that retail IT managers would have made themselves familiar with the ins and outs of the Payment Card Industry Data Security Standard.

But every day, we see evidence that PCI adherence is fraught with confusion. For example, the lists of elements that PCI tries to enforce has fostered the mistaken belief that PCI compliance is automatically and instantly granted to any retailer whose systems do what the list says.

Hardly. PCI compliance for Level 1 retailers is granted only after an authorized assessor conducts an assessment and that assessment is accepted by the merchant's credit card processor, also known as the acquirer.

View the Resource

Share or bookmarklet this web page at: