1. PCI DSS and MasterCard Site Data Protection Program

    Compliance secures your business and your customers' confidence.

    A thriving business is one that makes security a top priority, giving its customers assurance and peace-of-mind that their transactions are protected. That's why MasterCard and our industry colleagues have worked hard to develop the Payment Card Industry Data Security Standard (PCI DSS). And to help acquirers, merchants and service providers achieve compliance with this critical standard, MasterCard offers the Site Data Protection Program (SDP).

    The MasterCard Site Data Protection Program (SDP)

    The SDP Program is deployed globally by MasterCard Worldwide and consists of a combination of rules, guidelines, best practices, and approved compliance validation tools to foster broad compliance with the PCI Data Security Standard.

    What It Does
    The SDP Program, with the PCI Data Security Standard as its foundation, details the data security requirements and compliance validation requirements to protect stored and transmitted MasterCard account information. The SDP Program is a means to identify vulnerabilities in security processes, procedures, and website configurations. Adoption of SDP and subsequent compliance with the PCI Data Security standard will help merchants, service providers, and acquirers protect against security breaches, enhance consumer confidence, and protect the integrity of the overall payment channel.

    Why You Need It
    Participation in the SDP Program and compliance with the PCI Data Security Standard is vital for preventing fraud, securing MasterCard account information, and protecting the reputation of businesses.

    Features and Benefits
    The MasterCard SDP Program provides a clearly defined global framework, using a variety of compliance validation tools and solution providers. This flexibility helps acquiring institutions support their merchants, and enables third-party processors to put in place the necessary platforms, procedures, and policies to comply with the PCI Data Security Standard and mitigate the risks associated with storage of MasterCard account information.

    For further information on the MasterCard Site Data Protection Program Visit www.mastercard.com/sdp.

    For further information on the PCI DSS Visit the PCI Security Standards Council Web site

    Choosing a Trusted Vendor

    MasterCard requires merchants to demonstrate compliance with the Payment Card Industry (PCI) Data Security Standard. An Approved Scanning Vendor will evaluate your internet facing environment to find vulnerabilities and offer guidance on how to fix them. Should you require an onsite assessment, a Qualified Security Assessor can validate an entity’s adherence to the PCI DSS.

    Please click here for a list of Approved Scanning Vendors Please click here for a list of Qualified Security Assessors
    For more information on the PCI Security Council please visit www.pcisecuritystandards.org
  2. Also of Interest

Popular Downloads

Point of Sale Terminal Security Program (PTS)

PTS is meant to ensure the necessary level of protection for transaction and cardholder data on merchant equipment that supports the TCP/IP protocol.

PCI Merchant Education Program

The PCI Merchant Education Program provides a holistic view of the Payment Card Industry Data Security Standard DSS through a series of industry webinars.