What is PCI DSS?
I have no idea, but if you accept credit card payment for registration at your meetings, it’d be a good idea to check out this month’s MeCo chat, led by Jim Lewis of Best Meetings Inc. Here’s some more info from the e-mail announcement:
- Do you take credit cards? If you are not compliant you can face fines of $10,000 per transaction. Do you know if your company is compliant with the Payment Card Industry Data Security Standards (PCI DSS)? Do you know if your online registration company is PCI DSS compliant? Do you know what level your organization is in dealing with PCI DSS compliance (They are from levels 1 to 4 and based on total amount of dollars transacted per month). This chat will a overview of what PCI DSS is and what you need to know to get your organization compliant and what to look for when using other service providers.
James “Jim” Louis’ experience flows into the technology area of meeting planning, website management, online registration and association management. Jim has been a presenter at the MSAE Technology Expo in 2006 and 2007 on the topics of On/Offline Registration Systems, Smart Phone Selection & Useful Tools and Online Community Building. Jim is employed by Best Meetings Inc. out of Bloomington, MN.
November 27th in the MeCo Chat room
and
November 28th at the MeCo Mansion in Second life
1:00 - 2:00 PM PST
4:00 - 5:00 PM EST on both days
December 20th, 2007 at 6:34 pm
hey, excellent to see you posted on this subject. being in the online reg world (certain software) we’ve been watching the issue fairly closely. (we also went for the kill and straight to level one compliance).
one of the things that also should be pointed out is that level 1 compliance is the only compliance standard in which an actual human team audits the security processes (called a penetration test) (vs. a simple program that runs the test and is known to miss quite a bit…hence there being a huge difference between level 1 and levels 2-4).
i think the $10,000 liability is also an “introductory” level (lol) and the actual liability moves up to $25k per month in 2008.
there should be more info on the actual PCI site:
http://www.pcicomplianceguide.org/
certain also has a white paper on the subject that your readers may find helpful:
http://www.certain.com/security/
Leave a Comment