Monthly Archives: June 2009

Level 2 Merchants Required to Have On-Site Assessment by QSA

On June 15, 2009 MasterCard International introduced several changes to their Site Data Protection (SDP) program.  Among these changes was a new requirement for Level 2 Merchants to undergo an on-site assessment by a Qualified Security Assessor in order to validate their PCI DSS compliance.  The initial deadline for these validations is December 31, 2010.

Understanding PCI Levels and Types

Any merchant who accepts credit cards and has a merchant account must validate compliance. It does not matter if you use a 3rd party processor or if you outsource all of your credit card processing. It’s the ownership of the merchant account that defines if you must validate compliance. The only to avoid PCI compliance… Read more »