Browse Definitions :
Definition

Payment Card Industry (PCI)

The Payment Card Industry (PCI) is the segment of the financial industry that governs the use of all electronic forms of payment.

The PCI Security Standards Council (PCI SSC) oversees policies and technologies behind non-cash payments including transactions involving credit cards, prepaid cards, point-of-sale cards, e-purse, bank debit and ATM cards. In many places around the world, most payments made for goods and services go through the PCI rather than as cash transactions.

PCI organizations lease PCI hardware to commercial vendors of all kinds. A PCI authority known as an Approved Scanning Vendor (ASV) verifies compliance to the Data Security Standards (DSS) set forth by the PCI Security Standards Council. The ASV scans the vendor’s payment card network, ensuring minimum standards are in place and searching for vulnerabilities that might leave customer data exposed.

The PCI Security Standards Council was created by American Express, VISA, Discover, MasterCard and the Japan Credit Bureau in 2007. The PCI SCC is responsible for developing and managing the Payment Card Industry Data Security Standard (PCI DSS) and the Payment Application Data Security Standard (PA-DSS). 

This was last updated in June 2015

Continue Reading About Payment Card Industry (PCI)

SearchCompliance

  • information governance

    Information governance is a holistic approach to managing corporate information by implementing processes, roles, controls and ...

  • enterprise document management (EDM)

    Enterprise document management (EDM) is a strategy for overseeing an organization's paper and electronic documents so they can be...

  • risk assessment

    Risk assessment is the identification of hazards that could negatively impact an organization's ability to conduct business.

SearchSecurity

  • PKI (public key infrastructure)

    PKI (public key infrastructure) is the underlying framework that enables entities -- users and servers -- to securely exchange ...

  • obfuscation

    Obfuscation means to make something difficult to understand.

  • dumpster diving

    Dumpster diving is looking for treasure in someone else's trash.

SearchHealthIT

SearchDisasterRecovery

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • call tree

    A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...

  • Disaster Recovery as a Service (DRaaS)

    Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...

SearchStorage

  • cloud storage

    Cloud storage is a service model in which data is transmitted and stored on remote storage systems, where it is maintained, ...

  • cloud testing

    Cloud testing is the process of using the cloud computing resources of a third-party service provider to test software ...

  • storage virtualization

    Storage virtualization is the pooling of physical storage from multiple storage devices into what appears to be a single storage ...

Close