Code Correction for PCI Compliance by WideMind

Code Correction for W3C Validation by WideMind

Code Correction for PCI Compliance

So you’ve got your SSL certificate installed, your gateway setup, and you’re all set and ready to accept credit cards directly from your website – great! But do you know if you’re Payment Card Industry (PCI) compliant?

PCI compliance was put into place to ensure merchants have established additional fraud prevention and security measures to avoid problems that may come when accepting and storing sensitive customer information. If your website is not PCI compliant and your merchant bank finds out, you could be facing major daily fines in the thousands! Don’t let it get to that point!

To be PCI compliant, your website must maintain the following standards:

Build and Maintain a Secure Network

Requirement 1: Install and maintain a firewall configuration to protect cardholder data
Requirement 2: Do not use vendor-supplied defaults for system passwords and other security parameters

Protect Cardholder Data

Requirement 3: Protect stored cardholder data
Requirement 4: Encrypt transmission of cardholder data across open, public networks

Maintain a Vulnerability Management Program

Requirement 5: Use and regularly update anti-virus software
Requirement 6: Develop and maintain secure systems and applications

Implement Strong Access Control Measures

Requirement 7: Restrict access to cardholder data by business need-to-know
Requirement 8: Assign a unique ID to each person with computer access
Requirement 9: Restrict physical access to cardholder data

Regularly Monitor and Test Networks

Requirement 10: Track and monitor all access to network resources and cardholder data
Requirement 11: Regularly test security systems and processes

Maintain an Information Security Policy

Requirement 12: Maintain a policy that addresses information security

If you are unsure of what you need to do to comply, or if you’re not sure your server is setup to be PCI compliant, give us a call! We can run a scan on your site to see all the vulnerabilities and give you a full report showing what needs to be fixed, both on the web side and server side to ensure the maximum-possible security. Not only will this report show you what you need to do to become PCI compliant, but it also helps keep out potential hackers by sealing your open doors.

Don’t risk getting major fines by your bank, don’t risk the security of your customers, and don’t risk being hacked due to vulnerabilities you weren’t aware of! Give us a call today to have us run a full PCI compliance scan on your site!