PCI-DSS Requirements Free

PCI-DSS was created with the goal of ensuring card data was secure, and dealt with in a similar manner across all vendors and merchants. This greatly reduces the risk of vulnerability for all parties involved.

Anyone who accepts, processes, or transmits cardholder data (employees, contractors & developers) must comply with PCI requirements.

How does PCI-DSS protect cardholder data? Through a range of measures, our PCI-DSS policy takes important steps to protect cardholder data.

Secure Network All payment data is transmitted using AES encryption over a secure computer network. Card details can never be stored in plain text, and passwords must be secure and regularly changed. It would take the world's fastest computer a billion billion years to decrypt AES encryption without the private key (which is a secret, like a password).

Vulnerability Management Program Beem It has a policy of vulnerability management, including strong anti-virus, firewalls, agile security updates and systems designed with security in mind. This policy doesn't work, however, if your own devices are running old software.

It is important that you, as a user of IT systems, install software updates as soon as they become available, and familiarise yourself with how to install updates on all your devices.

As an organisation, we also conduct employee background checks before exposing employees to cardholder information. It is important to keep this in mind if you are ever in charge of onboarding someone in a sensitive position. If you're unsure, check with the HR department.

Access Control Unique IDs for everybody who accesses our networks, no physical access to cardholder information, and a security hierarchy are all ways in which Beem It maintains access control of their secure information.

As an employee who accepts, processes, or transmits cardholder data, it is important you never share your User ID or Password with anybody else. You never know where your information will end up.