The MasterCard Site Data Protection Program (SDP)
The SDP Program is deployed globally by MasterCard Worldwide and consists of a combination of rules, guidelines, best practices, and approved compliance validation tools to foster broad compliance with the PCI Data Security Standard.What It Does
The SDP Program, with the PCI Data Security Standard as its foundation, details the data security requirements and compliance validation requirements to protect stored and transmitted MasterCard account information. The SDP Program is a means to identify vulnerabilities in security processes, procedures, and website configurations. Adoption of SDP and subsequent compliance with the PCI Data Security standard will help merchants, service providers, and acquirers protect against security breaches, enhance consumer confidence, and protect the integrity of the overall payment channel.
Why You Need It
Participation in the SDP Program and compliance with the PCI Data Security Standard is vital for preventing fraud, securing MasterCard account information, and protecting the reputation of businesses.
Features and Benefits
The MasterCard SDP Program provides a clearly defined global framework, using a variety of compliance validation tools and solution providers. This flexibility helps acquiring institutions support their merchants, and enables third-party processors to put in place the necessary platforms, procedures, and policies to comply with the PCI Data Security Standard and mitigate the risks associated with storage of MasterCard account information.
For further information on the MasterCard Site Data Protection Program Visit www.mastercard.com/sdp.
For further information on the PCI DSS Visit the PCI Security Standards Council Web site
Choosing a Trusted Vendor
MasterCard requires merchants to demonstrate compliance with the Payment Card Industry (PCI) Data Security Standard. An Approved Scanning Vendor will evaluate your internet facing environment to find vulnerabilities and offer guidance on how to fix them. Should you require an onsite assessment, a Qualified Security Assessor can validate an entity’s adherence to the PCI DSS.Please click here for a list of Approved Scanning Vendors Please click here for a list of Qualified Security Assessors
For more information on the PCI Security Council please visit www.pcisecuritystandards.org