Blog

September 2009 - We'd like to give you an important heads up about something called the PCI DSS (Payment Card Industry Data Security Standards).

The PCI DSS outline specific security-related requirements for credit card transactions. They were created by a consortium of the big payment companies; Mastercard, Visa and American Express. The standards have existed for a while but have recently gained attention because the group has issued a deadline for all retail merchants to become compliant.

All new merchant accounts will be required to be compliant from July 1 2010, however existing merchants have a grace period of 2 years until July 2012 to become compliant. Details about compliance are available on the Security Standards Council website: https://www.pcisecuritystandards.org/smb/

So, what does this mean for you?

1. Firstly, your shopping cart configuration will need to be reviewed and updated to ensure it is compliant with the standards.
2. Secondly, you will need to complete and submit a self-assessment form that asks questions about your store infrastructure, your practices, and your security measures. This will measure how compliant you are.
3. Finally, you will need to have quarterly scans completed on your ecommerce system by an approved scanning vendor such as PCI Secure: http://pcisecure.com.au

This email is sent as a courtesy - while ultimately we are not responsible for your compliance we do want to make sure our clients are informed and prepared.

If you have any questions please see the website links included above, consult your accountant, or speak to one of us via support@experia.com.au or 1300 661 493. We've now got significant technical experience in implementing the required changes and achieving compliance so please let us know and we'll provide a quotation for your initial work.