Do any of you merchants PCI compliance?

[Mark]

Just curious if anyone uses the PCI complaince tools and logo.

[bristweb]

already pci compliant...

[Mark]

how do you remain compliant? :confused:

[rrw]

I have that question also--we have received an email from our merchant account this week regarding this issue.

[GonzaloGil]

What you need to do is the following:

1) Visit: https://www.scanalert.com/SignUp.sa?oc=2866

This will let you sign up for the free PCI compliance report from Mcaffee. Once you sign up they will scan your store and report any issues. There is always some sort of minor issue, if there is any, report them to [email protected] and they will resolve them.

2) Once the test is done, or in during that time, you can fill out the questionnaire they have online. This questionnaire deals with many topics, essentially they want to know that you keep information safe not just on the website but off the website as well. One key point is wireless security, as this is how most of the big hacks have happened to date.

As always submit any questions you have to [email protected] if you don't understand a question there.

3) Once you submitted the questionnaire, and the server passed the tests. They will provide a certificate, essentially a PDF that say "Yes, their website passes". This paper can be given to your merchant processor.

This process is to be repeated quarterly. Note you don't have to re-sign up. The server will be re-tested the next quarter and will let you know if there are any issues etc.

Now, some merchant providers may have partnered up with other security companies and may ask you to use their solution instead. That's fine, but the process will be similar.

So how to stay compliant? First, get compliant, second repeat process every quarter.

[Mark]

Great Info!!! :)

[GoldenEagleOutdoors]

McAfee logo

So, do we get one of those cool McAfee Secure logos to put on our site, when we do this? Or is that a totally separate deal??

[GonzaloGil]

So, do we get one of those cool McAfee Secure logos to put on our site, when we do this? Or is that a totally separate deal??

No that's a different deal. I just got an email with an offer from them
for our users.

https://www.mcafeesecure.com/Affilia...&k0=wTvK4WAMbD

[Mark]

Thanks for the info. That is a little steep cost for that page views. If they came down a little in cost, we may consider it...

[rrw]

Thanks, Gonzalo!

[SarahInc]

I thought legally you had to be PCI compliant in order to process credit card transaction?!