The Payment Card Industry (PCI) Data Security Standard (DSS) requires that if you accept, transmit or store credit cardholder data you must meet the requirements contained within the standard. The problem is that many people don’t know what that means. If you deal with credit cards and are required to meet the PCI DSS, my advice is to find a way to limit the scope of your compliance as much as possible. Rackspace recently concluded a two-year effort to receive our PCI Service Provider Report on Compliance (ROC) as a Compliant Level 1 Service Provider from Visa USA.
Filed in
on Aug. 25, 2008 by Jeff Reich