insights
What the Standard asks
of you, in plain language.
Guidance from our assessors on scoping, validation and the things that go
wrong in practice. Written for New Zealand merchants and service
providers, whether you take payments online, in store, by phone or
through a platform.
What is PCI DSS, and who
does it apply to?
Do we need an SAQ or a full assessment?
What counts as
cardholder data?
Who decides our
merchant level?
Does PCI DSS apply if we only sell online?
All articles
Written from assessment
work, not a slide library.
-
Secure Your Terminals
Merchants with EFTPOS terminals have a set of requirements specific to card-present transaction security. That’s…
Read more: Secure Your Terminals4 min read
-
PCI By the Numbers 2019
Every year, Verizon publishes a report on PCI DSS and the key findings from the…
Read more: PCI By the Numbers 20192 min read
-
What is PCI DSS?
Overview The Payment Card Industry Data Security Standard (PCI DSS) is a set of twelve…
Read more: What is PCI DSS?3 min read
-
PCI DSS Version 3.2 – Important Deadlines
OVERVIEW In April 2016, Version 3.2 of the Payment Card Industry Data Security Standard (PCI…