PCI Toolkit

Transcription

1 PCI Toolkit The following document will define "PCI-DSS" (The Payment Card Industry Data Security Standard) and why it is important for your business. As always, if you need further assistance, please do not hesitate to call

2 As a merchant who accepts credit cards you are required to protect the information you receive. The PCI Toolkit provides you with a suite of products and services designed to protect you and your business. First, lets start with some definitions. The PCI Security Standards Council is an organization founded by the major card brands such as Visa, Discover, MasterCard and American Express. This council is tasked with helping to ensure the security of credit card transactions. They do this, in part, by publishing a set of security standards, known as the PCI Data Security Standard or PCI DSS. These standards are designed to protect YOU, YOUR CUSTOMERS, and everyone involved in credit card transactions. Every business that accepts credit cards is required to be compliant with these standards, regardless of how big or small you are, how many transactions you process, or whether or not you store credit card information. It is your responsibility as a merchant that accepts credit cards to do your part for the security of the payment system. Ensuring the system is secure helps consumers feel confident in spending with you! This is where the PCI Toolkit helps you. 1

3 The process of becoming PCI DSS compliant is easier than you thought - let s get started! The Merchant Identification Number (MID), assigned to you will be your username. You will receive an from support@pcitoolkit.com with the subject Important Notice from PCI Toolkit Your Attention Required that will contain your username (MID) and password. STEP 1: STEP 2: go to our web site at: enter the Username («Merchant_ID») and initial password («Passcode») into this screen. You will be prompted to select a permanent username and password the fist time you log on. STEP 3: Click, Log in This will put you in the system for the first time and you will be given step-by-step instructions as to what to do next. 2

4 Benefits of the PCI Toolkit: Customer Support Live agents available 7am to 9pm CST and will respond to afterhours phone messages or inquiries within two business hours. Please call or anytime you need assistance with meeting your PCI requirements. Breach Insurance $50,000 (per MID) of coverage for potential costs such as forensic audits and card brand fines in the event a data breach does occur. Online SAQ User friendly online Self-Assessment Questionnaire simplifies the completion process. Vulnerability Scanning Our data protection program features automatic, quarterly vulnerability scanning for merchants with IP terminals, virtual terminals and POS systems. It runs automatically and notifies you of vulnerabilities. Scanning detects any vulnerable points in a merchant s IP systems so that they may be remedied BEFORE card/cardholder data theft occurs. 3

5 Data Incident Management Program Data Incident Management Program is a comprehensive suite of services that provides expert assistance in the event of a data breach incident, saving time and money while giving peace of mind. Included in the Data Incident Management Program are: Data Incident Forensic Services Full forensic investigation, review and incident reporting by a nationally recognized breach investigator upon requirement by regulator. Standard forensic incident assessment typically mandated by the card brands, comprising investigation, report generation and client review. Rectification services are not included. ($12,000 value) EMV POS Equipment Replacement Provides up to $1500 of EMV compatible POS equipment or software per merchant (MID). A merchant must be formally advised or required to replace existing equipment or software by a regulatory agency, card brand or forensic investigation. New equipment or software is delivered directly to the merchant. ($1500 value) Legal Services Up to $10,000 in legal services are available from a nationally recognized law firm specializing in data loss and compromise situations. A 20 percent discount from standard firm fees is available for incidents requiring greater than $10,000 in legal services. ($10,000 value) 4

6 Data Incident Management Program Data Incident Notification Services This legal service determines if and when a data breach incident should be reported to regulating bodies, and then completes the notification process. When incident evaluation concludes authority notification is required, customized reporting to the proper federal, state and local entities that require such incident reports are created. Reporting is delivered in the specific formats required by these agencies, within the time frames these organizations also mandate. All notifications are reviewed by a lawyer specializing in privacy matters, and are presented for merchant approval prior to submission to the various regulatory entities. ($12,000 value) Consumer Notification Services In the event of a data breach incident requiring consumer notification, the affected merchant will provide a comprehensive mailing contact list. A notification will be prepared and distributed to consumers and/or consumers affected. Copywriting and fulfillment coordination services are included. Any printing, mailing, postage costs, electronic delivery costs, et. are additional. ($12,000 value) 5

7 Data Incident Management Program Data Incident Public Relations (PR) Management A national caliber PR firm creates internal messaging and communications that inform company management and staff about a data incident, as well as external messaging designed for end-users such as consumers and customers. Additionally, if required, the PR firm will create and distribute an incident press release. Services include interviews, copywriting and design of communications and provision in appropriate format(s) for end-user distribution. Any printing or press release distribution services are additional. ($12,000 value) Cyber Attack Readiness Toolkit If you are interested in learning more about the optional service that includes Penetration-Testing (PEN-Testing) and Primary Account Number (PAN) scanning which will safely and easily simulate real-world attacks against your business, please contact our support team at or support@pcitoolkit.com. COMPLIANCE IS BOTH SMART AND REQUIRED. Keeping your customer s information safe is smart for your business and required by the card brands and in some cases state law. The PCI Toolkit has additional fees as provided in your merchant application. In addition, if you do not complete the steps required to validate your compliance, you may be subject to a Non Compliancy fee of $19.95 per month. For additional information please contact us via information please contact us via support@pcitoolkit.com or call us at We re here to help you through this easy process. Sincerely, Bridgeway Payment Systems, LLC

8 Contact Information: