FAQ

  • What is the PCI DSS standard?

    The PCI DSS standard is a set of security requirements for cardholder data that is stored, transmitted, and processed in the information infrastructures of organizations. The standard contains 12 detailed requirements.

  • Why was PCI DSS certification introduced?

    In order to guarantee the security of their customers’ funds, companies such as Visa and MasterCard require merchants and various service providers that accept payments from customers through these payment systems to comply with the PCI DSS standard.

  • What is the main objective and purpose of the PCI DSS standard?

    The main objective of the PCI DSS standard is to ensure the security of network infrastructure and protect cardholder data, since these are the most vulnerable issues that directly threaten the loss of privacy and funds. 
    The PCI DSS standard regulates the rules of payment systems operation, as well as the procedures for their development and monitoring.
     
    The PCI DSS standard focuses on the following aspects:
    ● Protection of payment card data.
    ● Building and subsequent maintenance of a secure network.
    ● Implementation of strict measures to control access to information.
    ● Elimination and management of vulnerabilities.
    ● Regular network monitoring and testing.
    ● Development of a reliable information security policy.

  • What is the cost of a PCI DSS certificate?

    To answer this question, our specialists need to know more details about your business. The cost will be minimal for an online store, but several times higher for a bank or data center. Contact us or fill out a commercial proposal and get all the information you need.

  • What are the advantages of a PCI DSS certificate?

    ● Compliance with the requirements of international payment systems. Without meeting these requirements, fines may be imposed and services may be denied.
    ● Mitigation of risks from possible disclosure of confidential information.
    ● A reliable and stable company reputation.
    ● Increased trust and, as a result, higher sales.

  • Which businesses are subject to the requirements of the PCI DSS standard?

    PCI DSS requirements apply to commercial enterprises, banks, processing centers, data centers, various service providers, retail stores, payment gateways and other enterprises and organizations engaged in the processing, transmission and/or storage of cardholder data.

  • How do I know which business needs to be certified for compliance with the PCI DSS standard?

    PCI DSS requirements apply to commercial enterprises, banks, various service providers, retail stores, call centers, payment gateways and other enterprises and organizations engaged in the processing, transmission and/or storage of cardholder data.

  • How can I determine whether our company needs to have a certificate and meet the requirements of the PCI DSS standard?

    If your organization stores, processes, and/or transmits payment card data, and business processes can affect the security of these cards, you need to be certified to comply with the PCI DSS standard.

  • We have a small business – a restaurant and a hotel in the Carpathians. Do we also need to have a PCI DSS certificate?

    If your organization stores, processes, and/or transmits information about at least one card transaction or cardholder during a year, you must meet all the requirements of the PCI DSS standard.

  • I am the head of a new retail chain that will enter the market within a year. Why does our retail network need a PCI DSS certificate?

    If your store handles even one transaction, you must comply with the PCI DSS standard. This requirement applies both to offline and online stores.

  • I own a travel business. Why does my company need a PCI DSS certificate?

    In 2016, the IATA issued a requirement for all travel companies operating in the online booking system. 
    This requirement is very simple: all IATA system participants had to pass mandatory certification for compliance with the PCI DSS standard by March 1, 2018.
     
    Your travel agency needs a PCI DSS certificate in order to guarantee the security of your customers’ data and funds when making payments with payment cards such as Visa, MasterCard, etc.
     
    Without this certificate, it is highly probable that your clients’ data can be accessed by intruders in order to steal funds.

  • What are the potential consequences for a travel agency that does not obtain a PCI DSS certificate?

    If a travel company or tour operator is PCI DSS certified, they will be able to book and sell air tickets. After March 1, 2018, the IATA stopped providing its services to companies that are not PCI DSS certified.

    Failure to comply with the IATA requirements results in penalties and higher service fees or a complete shutdown of online booking.

  • I plan to create an online store that sells goods for children. Do I need a PCI DSS certificate?

    Our company dealt with a case like this. We were contacted by the representatives of a small online store who needed help in obtaining a PCI DSS compliance certificate.
    The owners of the store decided to accept payments for goods from customers through their website. To do this, they had to connect the website to the payment system of a large Ukrainian bank.

    The first thing the bank required was for the online store to pass PCI DSS certification.

    You need a PCI DSS certificate, and we will help you obtain it as soon as possible.

Made with