Cybersecurity Glossary
PCI DSS
The card industry's security requirements for anyone handling payment card data.
What PCI DSS means
The Payment Card Industry Data Security Standard applies to any organisation that stores, processes or transmits card data. The obligations scale with volume and method. Using a hosted payment page, where card details never touch your systems, dramatically reduces what applies to you.
Why PCI DSS matters for small businesses and nonprofits
Many small businesses accept cards without realising they carry obligations. The simplest compliance strategy is almost always to remove yourself from scope rather than to secure card data yourself.
What to do about PCI DSS
- Use a hosted payment page or payment links so card data never reaches your systems
- Never store card numbers, and never accept them by email or telephone note
- Complete the self assessment questionnaire that matches how you actually take payment
Not sure where you stand on this?
We review your current setup against the basics, tell you plainly what is covered and what is not, and give you a ranked list with effort and cost. No jargon and no scare tactics.