USA ePay : PCI DSS Compliance

What is PCI DSS The PCI DSS, a set of comprehensive requirements for enhancing payment account data security, was developed by the founding payment brands of the PCI Security Standards Council, including American Express, Discover Financial Services, JCB International, MasterCard Worldwide and Visa Inc. International, to help facilitate the broad adoption of consistent data security measures on a global level. The PCI DSS is a multifaceted security standard that includes requirements for security management, policies, procedures, network architecture, software design and other critical protective measures. This comprehensive standard is intended to help organizations proactively protect customer account data.
	Our Level 1 Service Provider USA ePay is partners with Trustwave for our Level 1 PCI DSS compliance. Every year USA ePay goes through a rigorous security assessment that covers any and all aspects of our security policies and standards which must be enforced.

A Team Effort PCI DSS compliance is a compilation of all the security standards from all the major credit card associations. These include: American Express DSOP, Discover DISC, MasterCard SDP, Visa CISP & Visa AIS. USA ePay covers all the required security standards by being PCI DSS compliant. For more information on each association's requirements, please visit their individual websites.

Covering the Basics The PCI DSS compliance covers some of the most important, yet basic vulnerabilities in the industry, including API Abuse, Access Control, Authentication, Code Permissions, Code Quality, Cryptography, Error Handling, General Logic Error, Input Validation and Environmental Security in regard to systems. These can be traced back to the original 12 requirements of Visa CISP: Install and maintain a firewall to protect data. Keep security and patches up-to-date. Protect stored data. Encrypt data sent across networks. Use and update antivirus software at all times. Restrict access to "need to know." Assign unique ID's to all users. Modify pre-set security settings of 3rd party vendor software. Trace all access to data by unique ID's. Regularly test your security systems and policies. Implement and maintain an information security policy. Restrict physical access to data.
The program ensures the annual validation of merchants and service providers on both the issuing and acquiring side of the business.

Contacting Us It's easy to get in touch with us. We are here to help you when you need us. Become a Reseller Are you a merchant service bank or ISO interested in reselling the gateway to your merchants? Get started today with USA ePay.