Standards & Frameworks

PCI DSS

Acronym: Payment Card Industry Data Security Standard

Mandatory security standard for any organisation that stores, processes or transmits cardholder data.

PCI DSS v4.0.1 contains 12 requirement domains and is enforced by card brands through acquiring banks. Level 1 merchants and service providers undergo annual Report on Compliance (RoC) audits by a Qualified Security Assessor (QSA).