IT Security Tip #19 – A WARNING if you handle, process or store client credit cards

IT Security Tip #19: A WARNING if you handle, process or store client credit cards

If you handle, process or store credit cards in any manner, you are required to comply with PCI DSS, or Payment Card Industry Data Security Standards. This is a set of LEGAL requirements you must abide by to help maintain a secure environment. If you violate them, you will incur serious fines or fees.

Are you subject to them if you take credit card payments over the phone? Absolutely! If you have clients that pay you direct by credit card, you’re subject to these laws. However, there are various levels of security standards – but thinking you don’t process enough to matter or that “no one would want to hack us” is dangerous thinking. All it takes is an employee writing down a credit card number in an e-mail or on a piece of paper to violate a law; and then you’ll be left with legal fees, fines and the reputational damage incurred when you have to contact your clients to let them know you weren’t properly storing or handling their credit cards.

Getting compliant – or finding out if you ARE compliant – isn’t a simple matter I can outline in a 1-2-3-step check-list. It requires an assessment of your specific environment and how you handle credit card information.

A great resource is the PCI Security Standards Council, or www.pcisecuritystandards.org. The absolute best way to know where you stand for PCI compliance is to contact your merchant account company…they’ll have very specific guidance for you since if you were to have a problem they’d also have one too!

Terry has an innate sense of integrity that governs everything he does, from his personal life to his professional career. Terry’s passion for delivering the right solution engenders a loyalty among his clients that is rarely seen these days. I was impressed with the ease of which Terry is able to talk technology to people from all walks of life, from those with no computer skills to the techno-geeks. He is a natural leader, and people respond very well to his engaging personality and quiet confidence.”

Computer Support
Brian Holly, Assistant VP of IT, MTSU

Connect With Your IT Experts

80D South Broad St. PO Box 1373 Lexington, Tennessee 38351
731.249..5700
731.968.9983