Definition

PCI DSS

PCI DSS, the Payment Card Industry Data Security Standard, is the set of security requirements that any organization storing, processing, or transmitting payment card data must follow. The card brands created it and enforce it through banks and payment processors rather than through government law. Version 4.0 organizes its controls under twelve broad requirements, from building secure networks to restricting access and testing systems regularly. How a company proves compliance depends on its transaction volume and setup, ranging from a self-assessment questionnaire to a full onsite audit. Falling short can bring fines and higher processing fees, so merchants treat it seriously.