The PCI standard was developed to squelch fraud and the perceived risk of using credit cards, especially for e-commerce. PCI compliance is mandatory if you capture, process, store, or transmit credit card data—that’s almost every business today. Compliance requirements are more stringent if you store customer card data, since retention creates more openings for theft. If you have a security breach, you can face fines of thousands of dollars per month until you prove compliance. Why take that risk? |