PCI Data Security Standard

In response to consumer demand for absolute protection of sensitive account information, the major card associations have developed data protection programs for members, merchants, and service providers. Visa’s Cardholder Information Security Program (CISP) and MasterCard’s Site Data Protection (SDP) programs have been aligned into the Payment Card Industry (PCI) Data Security Standard, which outlines best practices for securing credit card data that is stored, processed or transmitted.

The standard defines a number of specific security controls and guidelines for protecting cardholder data, wherever it is located. Compliance with these regulations is required for any organizations storing, processing, or transmitting cardholder data. Failure to comply with these new security initiatives can result in fines, increased fees, restrictions, or permanent prohibition from major card association programs.