If I use a third-party software developer or Internet payment gateway, do they need to be in compliance with the PCI DSS?
Yes, any third-party software provider or Internet payment gateway that processes, transmits or stores cardholder data must be compliant; however, there are several companies that are not. You must check with your provider to confirm their compliance status. If you use a provider that is not compliant, you should discontinue use of that provider and notify your processor of your new provider. http://www.mastercard.com/us/sdp/serviceproviders/compliant_serviceprovider.html http://usa.visa.com/download/merchants/cisp_list_of_cisp_compliant_service_providers.
Related Questions
- If I use a third-party software developer or Internet Payment Gateway, do they need to be in compliance with the PCI Data Security Standard?
- If I use a third-party software developer or Internet payment gateway, do they need to be in compliance with the PCI DSS?
- What Exactly Is The Cisco Career Certification?
