The credit card companies are beginning to seriously enforce PCI compliance for all websites that take credit card transactions over the web. In fact, you may have received a letter from your payment processor asking you to become PCI compliant within 30 days or you’ll be fined (and in some cases your account suspended).
The solution is to provide your payment processor with a PCI compliance certificate. PCI compliance is actually a good thing! It helps ensure that your software, hardware, and network are secure from hackers and credit card thieves.
The good news is that if you’re hosted with us and on a recent version of our preferred shopping cart AspDotNetStorefront then you’re already PCI compliant. However, it’s still necessary to scan your website on a regular basis and comply with PCI standards that continue to evolve. Even if you’re not hosted with us and have custom e-commerce websites or non-PCI compliant websites we can help you too.
So what does PCI compliance cost? If you’re hosted with us it’s as simple as asking for our PCI flat rate annual service. If software vulnerabilities are found then we’ll work with you on a time/materials basis to resolve these.
It’s worth noting that PCI compliance doesn’t guarantee 100% security. For example, PCI compliance will not protect you if a credit card number is written down on a piece of paper and is later compromised. You must still ensure that you use best practices whenever handling credit card information. Need additional help? Call us!
A good article to start learning more about PCI can also be found here: http://www.practicalecommerce.com/articles/629-What-Is-PCI-Compliance-And-Should-Merchants-Be-Concerned-About-It-