What does a small-to-medium sized business (Level 4 merchant) have to do in order to satisfy the PCI requirements?
To satisfy the requirements of PCI, a merchant must complete the following steps: Identify your Validation Type as defined by PCI DSS . This is used to determine which Self Assessment Questionnaire is appropriate for your business. Complete the Self-Assessment Questionnaire according to the instructions in the Self- Assessment Questionnaire Instructions and Guidelines. Complete and obtain evidence of a passing vulnerability scan with a PCI SSC Approved Scanning Vendor (ASV). Note scanning does not apply to all merchants. It is required for Validation Type 4 and 5 – those merchants with external facing IP addresses. If you electronically store cardholder information or if your processing systems have an internet connection, a quarterly scan by an approved scanning vendor is required. Submit the SAQ, evidence of a passing scan (if applicable), and the Attestation of Compliance, along with any other requested documentation, to your acquirer.
Related Questions
- What does a small to medium sized business, level 4 merchant, has to do to become PCI Compliant and meet all the requirements?
- What does a small-to-medium sized business (Level 4 merchant) have to do in order to satisfy the PCI requirements?
- What does a small‐to‐medium sized business (Level 4 merchant) have to do in order to satisfy the PCI requirements?
