Risk reduction
- How can you reduce your risk of data breaches?
- Are you using devices that captures and stores card information?
- Is your card terminal connected to other systems?
- Are your third-party service providers PCI DSS compliant?
- Are you receiving card information by email?
- Are you manually re-entering card data from one system into another?
- Does your website process payments directly?
- Are you storing card data in your customer relationship management system?
- Are you accepting payments on mobile devices and are you using the right type of equipment?
- Are you storing CVV security codes?
- Do you record phone calls?
- Are you processing repeat payments without tokens?
- Is your payment software properly validated?
- Are you creating files with card data for end-of-day processing (batch processing)?