Skip to content

Glossary: Business Risk, Third Parties and Compliance

PCI DSS (Payment Card Industry Data Security Standard)

Also written: PCI DSS

The card brands' security standard for businesses that take cards. It is not a law, but it is enforced through contracts with payment companies, so it is treated like a regulation and limits risk acceptance.

Where the book teaches it

Related terms

SAQ A (Self-Assessment Questionnaire A)Attestation of Compliance (AOC)Hosted payment page