Meeting the PCI Application Security Requirements: Building Compliance In
Source: Ounce Labs
The security of customer payment data is not just a payment brand issue but is the responsibility of all businesses that participate in the payment process. All merchants and service providers that store, process and transmit payment card data are required by the payment brands to comply with the Payment Card Industry (PCI) Data Security Standard - their customers expect it and their reputations depend on it. Since 2005, over 215 million data records have been exposed as the result of security breaches. Uproar in the press, worldwide legislative bodies, and among consumers has spurred industry groups to work toward regulations and best practices concerning the security of private data.