Merchants that store, process or transfer credit card data are subject to the requirements of the PCI DSS and, independent of the type of acceptance (POS, MOTO, e-Commerce, etc.), are obliged by the credit card organizations to verify their PCI compliance.
In practice, PCI DSS requires that merchants complete a questionnaire on their own IT security, the so-called PCI Self-Assessment Questionnaire (SAQ), once per year. For merchants that store, process or transfer credit card data in their own systems that can be accessed from the Internet, the standard additionally requires that PCI Vulnerability Scans be conducted each quarter by an authorized Approved Scanning Vendor (ASV). Using these scans, the IT systems involved are checked for vulnerabilities, and the system administrator receives a comprehensive report about possible deficiencies and recommendations on how to eliminate them.
usd.de AG is a Qualified Security Assessor (QSA) and Approved Scanning Vendor (ASV) and therefore has been authorized by the credit card companies to conduct all security tests in accordance with PCI DSS that are relevant for merchants. The usd PCI DSS Plattform helps merchants to obtain the PCI certification as simply and cost-effectively as possible.
Register yourself free-of-charge on the usd PCI DSS Plattform. The usd PCI Competence Center would be happy to consult with you on this subject
