From the course: Safeguarding Customer Credit Card Data: PCI Compliance
Unlock the full course today
Join today to access over 24,900 courses taught by industry experts.
Next steps for PCI compliance and safeguarding payment data
From the course: Safeguarding Customer Credit Card Data: PCI Compliance
Next steps for PCI compliance and safeguarding payment data
- [Instructor] So what's next in your PCI journey? If you work at an organization that is in any way part of the payment process, you will have to get on board with safeguarding payment card data. Your organization may have been notified by a card brand or your acquiring bank that they require you to be PCI compliant. In this notification, they should identify what level they estimate you are, and this designation defines whether you must complete a ROC or an SAQ, which we covered in chapter four. Firstly, don't panic. If you are a really large merchant or service provider, this is not something that will be a surprise. So let's assume you're a small business. You can potentially complete your annual compliance without a PCI expert, particularly if you've outsourced a lot of the payment process, as we discussed in earlier chapters. However, if it's the first time your company is completing this, you should reach out to a PCI expert for help in scoping and understanding the intent of…