Payment Card Industries Data Security Standards

Payment Card Industry (PCI) Data Security Standards (DSS) require merchants to protect sensitive cardholder information. PCI DSS compliance requirements mandate that each state agency accepting credit card payments complete an annual assessment of their card processing environment. Requirements under PCI DSS vary greatly depending on an agency's acceptance environment.

According to the PCI Security Standards Council, there are three steps for adhering to the PCI DSS – which is not a single event, but a continuous, ongoing process.

1. Assess

Identify cardholder data, take an inventory of your IT assets and business processes for payment card processing, and analyze them for vulnerabilities that could expose cardholder data.

2. Remediate

Fix vulnerabilities and do not store cardholder data unless you need it.

3. Report

Compile and submit required remediation validation records (if applicable), and submit compliance reports to the acquiring bank and card brands you do business with.

For more information regarding PCI DSS and the requirements applicable to your agency contact the Treasury Services Coordinator at 405-521-3121, or visit the PCI Security Standards Council site.

Last Modified on Sep 18, 2023