PCI DSS refers to a set of protocols set by the major credit card providers which merchants and any other organisation which stores, processes or transmits cardholder data must adhere to when processing and storing credit card data. These are commonly known as the Payment Card Industry Data Security Standards (PCI DSS).
All merchants must adhere to the PCI DSS to be PCI compliant. The Data Security Standards are set to ensure that all processes for taking, processing and storing credit card details are safe. Once the Standards are adhered to, the merchant is deemed PCI Compliant.
The PCI DSS cover a number of areas of an organisations systems and processes which may potentially be vulnerable to theft or misuse of data. The standards cover everything from building and maintaining a secure network to implementing access control measures.
Firstly, your customer data is at risk. If it’s not adequately protected from theft, fraud and/or misuse, your customers’ credit card data may be stolen and used fraudulently. In that event, not only will you have some very unhappy customers, you’re also likely to suffer severe damage to your brand. Ultimately for organisations who are not PCI compliant, the major credit card providers may impose fines - or even withdraw their services - leaving you unable to take payment by credit card.
The onus for compliance is with you. However, as one of the first PCI accredited service providers in the UK, we have a wealth of experience in helping our clients achieve and maintain PCI Compliance. Below are just some of the ways we can help:
We can help you in a number of ways. Our software solutions are PCI ready - this means that when you implement one of our solutions, the overheads of achieving compliance are greatly reduced. Implementing a PCI ready solution allows you to concentrate on securing your networks, internal policies and procedures.
We offer a hosting service, where we house your servers in premises which adhere to the latest PCI DSS requirements. This service removes the headache of safe storage - and of keeping abreast of any changes to the Standards relating to hardware storage. Read more about our hosting & managed polling service here.
We offer this service to retailers to ensure that devices within a store network are protected. This service also enables you to ensure that the systems supporting your EPoS estate are secure, and provides 24/7 system monitoring to not only achieve but maintain compliancy.
Sanderson has long established relationships with a number of specialist PCI companies who we work with to ensure our clients receive the best advice and are able to achieve PCI compliance in the shortest, and most cost effective way.
For further help and guidance on PCI Compliance please contact us, call 024 7655 5466 or email info@sanderson.com
Richard Blunt, Director of IT, comments on the project management skills of Sanderson:
"We knew the programme was ambitious and carried some inherent risks. However, the experience and careful planning by the Sanderson team gave us confidence, a feeling that has been endorsed by the successful rollout and benefits we are seeing."