Glossary: Business Risk, Third Parties and Compliance
PCI DSS (Payment Card Industry Data Security Standard)
Also written: PCI DSS
The card brands' security standard for businesses that take cards. It is not a law, but it is enforced through contracts with payment companies, so it is treated like a regulation and limits risk acceptance.
Where the book teaches it
Related terms
SAQ A (Self-Assessment Questionnaire A)Attestation of Compliance (AOC)Hosted payment page