The security of cardholder information is important to both your customers and your business. In fact, since 2005, there have more than 1 billion stolen records in over 2,000 separate data breach incidents – with payment card data being the theft target in 48 percent of all breaches in 2011 alone.1 And yet, only 4 percent of all breached organizations were PCI compliant at the time of their data breach.2,3
What Is PCI DSS?
The Payment Card Industry Data Security Standard (PCI DSS) was created by the major credit card companies as a guideline to help business owners implement the necessary hardware, software and other procedures to guard sensitive credit card and personal information.
The object of becoming compliant with PCI security standards is to help protect sensitive cardholder data from data thieves who are shifting their sights to small merchants because they think they are easier targets. If your business fails to become PCI compliant,3 you could be putting your business at greater risk from the growing threat of payment card data breaches and theft, which may result in substantial penalties (such as fines from banks, regulatory agencies, and card organizations), fraud and charge backs, as well as legal costs and lost customers. (more…)