Website Verification

Learn about how you can make your website secure and safe for your customers

  • Website Verification Poll

  • Mybloglog

    Join My Community at MyBloglog!
  • Check out my website verification online magazine:

  • Add my blog to:

    Add to Technorati Favorites

Posts Tagged ‘PCI certified’

The PCI Standards SAQ

Posted by websiteverification on June 1, 2009

While doing my research into the PCI standards I have come across a term quite often; SAQ.  The acronym stands for Self Assessment Questionnaire. The PCI standards Self Assessment Questionnaire is a tool used to assist merchants and service providers in self-evaluating their PCI compliance.

There are five different versions of the PCI standards SAQ in order to meet various scenarios.  The version that your organization will need to complete depends on how your company handles credit card data. For some businesses, the appropriate questionnaire is short and simple, while for others it is long and technical.  But each questionnaire is divided into six sections that focus on a specific are of security. These are:

  1. Maintain a secure network.
  2. Protect cardholder data.
  3. Maintain a vulnerability management program.
  4. Implement strong access control measures.
  5. Regularly monitor and test networks.
  6. Maintain and information security policy.

While completing the SAQ, merchants have to pass each question in order to be considered compliant with the PCI standards. Failing any question means the merchant or service provider is not compliant. The risk(s) identified by the questionnaire must be remedied and the questionnaire retaken.

The SAQ may seem somewhat complicated, but there are many businesses and websites out there that can help you complete it.  Also, depending on your merchant level, the SAQ may not be enough.  You may need to have an onsite audit completed to certify your PCI compliance.  The best thing to do if you are unsure is to check with your acquirer.

Advertisements

Posted in pci compliance, website verification | Tagged: , , , , , | Leave a Comment »

Are the Websites you Shop on PCI Certified?

Posted by websiteverification on March 31, 2009

You may have heard a lot about PCI compliance, and maybe you have taken all the steps you need to ensure that your business is PCI certified. But, I have a question for you? Are the websites you are shopping on PCI certified? This is something that is important to you as an online shopper, because you want to make sure that your personal information, such as account numbers, etc. is safe and secure. One way that you can be sure, is if the website you are shopping on is PCI certified.

Just to review, what it means to PCI certified is that the website is complying with all the requirements of the PCI DSS (which stands for Payment Card Industry Data Security Standards). These requirements include things such as building and maintaining a secure network, protecting cardholder data, maintaining a vulnerability management program, regularly monitoring and testing networks, and maintaining an information security policy. Also, the website should be carrying out quarterly or daily PCI vulnerability scans. These scans will scan the website on a quarterly or daily basis in order to make sure that there are no threats or vulnerabilities on the website that would cause customer information to become stolen by hackers and online thieves.

You may be wondering how you can tell if a website that you shop on is PCI certified. The easiest way to tell is by looking for trust seals posted on the website. Trust seals are small images, that when clicked on, will confirm that the website has been verified and has conducted PCI scans. It is important to look for trust seals when shopping online, so that you aren’t putting your personal information in on a site that is not safe from online theft.

So when you shop online, be careful. Do your homework and look for those trust seals that are up to date. You want to be sure that the site you are shopping on is verified by a third party, and is following PCI compliance. Don’t let your personal information fall into the hands of the wrong person. Make sure that you are shopping on websites that are PCI certified.

Posted in pci compliance, website verification | Tagged: , , , , , , | Leave a Comment »