| Optimal
Account PCI Compliance
PCI DSS was made compulsory
for processing card payments from Feb 2010.
PCI Compliance is the Payment Card Industry Data Security
Standard, a world-wide benchmark mandated by
the card schemes for the protection of cardholder
identity and transaction information. If you are not
covered and do not comply with the standard you could
face substantial fines imposed by card schemes or result
in permanently being barred from using card acceptance
programmes, should a security breach occur.
Now the good news...
We have teamed up with Trustwave, a PCI Security Standards
Council–accredited Qualified Security Assessor
(QSA) and ASV. This service is optional.
The fee for this service is usually £120 per
annum. However as part of the Optimal Account we have
negotiated with them so that it can be paid monthly
at £10 per month. This fee covers your validation
actions in Trustwave’s TrustKeeper portal, and
your compliance certificate, once achieved.
You can opt to receive this service from an
external provider and send us a copy of your
certificate once compliant. For a list of providers
please
click here.
Isn't this just another way of getting more money out
of businesses?
Not at all. This is for the benefit of all concerned.
80% of all online fraud occurs using stolen or missused
payment details. No matter where you go to become PCI
compliant you will have to pay a fee.
What if I don't want to become PCI compliant?
If you decide not to become compliant then you can
still open an account with us. However please remember
that you could face substantial fines and even be barred
if you do not.
Is Web Merchant Services compliant?
Yes, we have been compliant from day one.
About the PCI Security Standards Council
The PCI Security Standards Council is an open global
forum, launched in 2006, that is responsible for the
development, management, education, and awareness of
the PCI Security Standards, including: the Data Security
Standard (DSS), Payment Application Data Security Standard
(PA-DSS), and Pin-Entry Device (PED) Requirements.
All of the five founding members have agreed to incorporate
the PCI DSS as the technical requirements of each of
their data security compliance programs. Each founding
member also recognizes the QSAs and ASVs certified by
the PCI Security Standards Council as being qualified
to validate compliance to the PCI DSS.
What now?
For much more information, including an FAQ's section
and the ability to download the relevant documentation,
please click here
Official PCI Security Standards website:
www.pcisecuritystandards.org |
