SMB needs to understand the importance of being PCI compliant and that just because the verbiage on a website says the vendor is compliant, doesn't make the merchant compliant. Just because it says it from a service provider standpoint, asking for a copy of their AOC is critical.
If your merchant service provider is guiding you through the SAQ, or telling you to just check yes or no, they are coercing you into falsifying documents which is a breach of your agreement.
Segment Resources:
https://www.linkedin.com/pulse/what-matters-moreyour-vendor-relationship-your-client-bulin/?published=t I also have a whiteboard video I can share that can show the hierarchy of the payments industry and why there is such a disconnect when it comes to information distributed to merchants
Christopher Bulin is the Sr. Solutions Officer with Card Z3N, making sure the solutions they provide not only meet clients needs, but also ensuring they are truly PCI compliant solutions. He is the Founder and CEO of Proven PCI, a software application for the payments Industry to help SME’s meet PCI with proof & automation.
InfoSec World 2021 is proud to announce its keynote lineup for this year’s event! Hear from Robert Herjavec plus heads of security at the NFL, TikTok, U.S. Department of Homeland Security, Stanford University, and more… Plus, Security Weekly listeners save 20% on Digital Pass registration! Visit https://securityweekly.com/isw2021 to register now!
