 |
What is PCI DSS, and do I Need it?
 |
PCI DSS, or Payment Card Industry Data Security Standard are a set of requirements ensuring that companies which store, process or transmit credit card information have a secure server. This applies to any merchant who has a Merchant ID from an authorising institution (typically your bank). Download a PDF copy of the PCI DSS. If you capture, store, process or forward client's credit card details, ie, if you come into contact with credit card details in any way (even as a phone in order), then you need to make sure your web hosting environment and website are PCI compliant. |
I Use a Third Party Credit Card Gateway, Do I need PCI Compliancy?
As the PCI standard's website mentions in their FAQs, even if you use a third party gateway and you never come into contact with the credit card details, this does not mean that you can ignore the PCI DSS, and there are some stiff penalties if you do and there is credit card fraud committed (up to many thousands of US$).
How Do I Get PCI DSS Compliant
There are various levels of compliancy, which are too involved to discuss here, but for most small business using a third party gateway making sure you are PCI compliant is really not that tough. You need to make sure that your web hosting company is PCI compliant. If you're looking for a PCI DSS compliant web hosting company then look no further. PHP-Web-Host.com servers are PCI compliant. You may download the executive summary of our PCI compliance certificate of our web server, as well as for the moneybookers and netcash credit card gateways we use. You may also click on the Security Verified Trust Certificate at the bottom of this page (blue icon) to view our security compliance.
So, step 1 is simple. Host your website with PHP-Web-Host.com and you'll know that the server you host your website on is PCI complaint.
Step 2 is equally simple. Get a SSL certificate for your website so that your sensitive client area's are in a secure, encrypted environment, in other words, your website will be available at https://. You can order your SSL certificate directly from PHP-Web-Host.com. You may also use an SSL from another provider, but please note that there is a fee for the installation. View details about SSL Certificates here.
That's about it for most small business using a third party credit card payment gateway, PROVIDED you never come into contact with the credit card details.
If you are implementing a more custom credit card payment solution where you will be collecting or processing credit card details, you're still at the right place. Our server's are compliant, so no problems there, but you're website itself will be subject to more stringent compliance standards. If this is the case, please contact us to discuss your needs.
[ Click here to view our Web Hosting Plans ]
What do you think about PCI DSS Compliancy?
Let us know what your thoughts are on PCI compliance. Do you think its necessary, or over the top? Is it good for consumers, or just another burden on retailers? What are your thoughts?
Comments
|
|
|
|
Add your comment