--- title: Is Your Retail Business At Risk Of Customer Payment Card Theft? Read This Important Information Right Away. description: Is Your Retail Business At Risk Of Customer Payment Card Theft? Read This Important Information Right Away. image: https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/pci-dss-compliance.jpg --- [Skip to the main content.](https://ontimetech.valeonetworks.com/blog/is-your-retail-business-at-risk-of-customer-payment-card-theft-read-this-important-information-right-away#main-content) [![OTT powerd by VN big](https://ontimetech.valeonetworks.com/hs-fs/hubfs/OTT%20powerd%20by%20VN%20big.png?width=500&height=175&name=OTT%20powerd%20by%20VN%20big.png "OTT powerd by VN big")](https://ontimetech.valeonetworks.com) [![OTT powerd by VN big](https://ontimetech.valeonetworks.com/hs-fs/hubfs/OTT%20powerd%20by%20VN%20big.png?width=500&height=175&name=OTT%20powerd%20by%20VN%20big.png "OTT powerd by VN big")](https://ontimetech.valeonetworks.com) - [Services](https://ontimetech.valeonetworks.com/our-services/) - [Managed It Services](https://ontimetech.valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://ontimetech.valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://ontimetech.valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://ontimetech.valeonetworks.com/our-services/compliance/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources](https://ontimetech.valeonetworks.com/resources/) - [Blog](https://ontimetech.valeonetworks.com/blog) - [About](https://ontimetech.valeonetworks.com/about/) - [Client Testimonials](https://ontimetech.valeonetworks.com/testimonials/) [415-294-5250](tel:4152945250) [Client Portal](https://portal.Valeonetworks.com) Toggle Menu Toggle Menu [415-294-5250](tel:4152945250) [Client Portal](https://portal.Valeonetworks.com) - [Services *Toggle Menu*](https://ontimetech.valeonetworks.com/our-services/) - [Managed It Services](https://ontimetech.valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://ontimetech.valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://ontimetech.valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://ontimetech.valeonetworks.com/our-services/compliance/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources *Toggle Menu*](https://ontimetech.valeonetworks.com/resources/) - [Blog](https://ontimetech.valeonetworks.com/blog) - [About *Toggle Menu*](https://ontimetech.valeonetworks.com/about/) - [Client Testimonials](https://ontimetech.valeonetworks.com/testimonials/) - Example Link - Example Link - Example Link [*Facebook*](https://ontimetech.valeonetworks.com/blog/is-your-retail-business-at-risk-of-customer-payment-card-theft-read-this-important-information-right-away#0) [*Instagram*](https://ontimetech.valeonetworks.com/blog/is-your-retail-business-at-risk-of-customer-payment-card-theft-read-this-important-information-right-away#0) [*LinkedIn*](https://ontimetech.valeonetworks.com/blog/is-your-retail-business-at-risk-of-customer-payment-card-theft-read-this-important-information-right-away#0) [*Twitter*](https://ontimetech.valeonetworks.com/blog/is-your-retail-business-at-risk-of-customer-payment-card-theft-read-this-important-information-right-away#0) [*Youtube*](https://ontimetech.valeonetworks.com/blog/is-your-retail-business-at-risk-of-customer-payment-card-theft-read-this-important-information-right-away#0) [*Medium*](https://ontimetech.valeonetworks.com/blog/is-your-retail-business-at-risk-of-customer-payment-card-theft-read-this-important-information-right-away#0) 2 min read # Is Your Retail Business At Risk Of Customer Payment Card Theft? Read This Important Information Right Away. [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Apr 14, 2014, 3:42:24 PM [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) ![PCI Compliance](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Blog%20Images/Imported_Blog_Media/pci-dss-compliance.jpg?width=200&name=pci-dss-compliance.jpg) ## Does Your Business Handle Cardholder Data? Here’s an Essential Overview of the PCI DSS In the past few months, a variety of companies, including Target, Michaels, and Neiman Marcus, have experienced data breaches. While data breaches are becoming an increasingly common occurrence, most of them can be avoided by following the guidelines outlined in the Payment Card Industry Data Security Standard (PCI DSS). ## **An Introduction to the PCI Data Security Standard** The PCI Data Security Standard includes twelve technical and operational requirements designed to protect cardholder data. These requirements can be split into six control objectives. Here’s an overview of the control objectives and PCI DSS Requirements: **Control Objective: Build and Maintain a Secure Network** 1. Install and maintain a firewall configuration that protects cardholder data. 2. Change vendor-supplied default passwords and other security measures on systems. **Control Objective: Protect Cardholder Data** 1. Protect cardholder data stored on systems. 2. Encrypt cardholder data during transmission across open, public networks. **Control Objective: Maintain a Vulnerability Management Program** 1. Install anti-virus software on all systems and update on a regular basis. 2. Develop and maintain secure systems and applications. **Control Objective: Implement Strong Access Control Measures** 1. Restrict access to cardholder data on a need-to-know basis. 2. Provide unique IDs to each individual with access to computers. 3. Restrict physical access to cardholder data. **Control Objective: Regularly Monitor and Test Networks** 1. Monitor and track access to cardholder data and network resources. 2. Test security systems and processes on a regular basis. **Control Objective: Maintain an Information Security Policy** 1. Maintain an information security policy to address security threats and vulnerabilities. ## **What Entities Must Comply with PCI DSS?** All entities involved with payment card processing, including financial institutions, merchants, processors, and service providers, must comply with PCI DSS. If you store, transmit, or process cardholder data and/or sensitive authentication data, you must comply with PCI DSS. The PCI DSS also applies to systems in the cardholder data environment (CDE). ## **Systems in the Cardholder Data Environment** The systems considered to be part of the cardholder data environment include the following: - Systems designed for security purposes, such as authentication servers. - Systems designed to facilitate segmentation, such as internal firewalls. - Systems that may impact the security of the CDE, such as web redirection servers. - Network components, including switches, routers, firewalls, wireless access points, network appliances, and various security appliances. - Virtualization components, including virtual machines, virtual applications, virtual applications/desktops, hypervisors, and virtual switches and routers. - Applications, including purchased or custom applications and internal or external applications. - Server types, including web, database, application, proxy, mail, authentication, Network Time Protocol (NTP), and Domain Name System (DNS) servers. - All devices or components within or connected to the cardholder data environment. While this is a comprehensive list of systems, the cardholder data environment must be used as a guideline. Entities must consider all systems and personnel that interact with, or store card holder data. In addition, entities must consider the PCI DSS on a day-to-day basis, instead of waiting until security problems arise. Ultimately, security should be a top priority for all entities involved with payment card processing. The PCI DSS also states that all third-party service providers must be considered and validate their own [compliance](https://www.ontimetech.com/compliance/). This validation can be done through a PCI DSS assessment or reviewing their services as part of their customers’ PCI DSS assessments. To learn more about PCI DSS compliance, please view the PCI DSS Requirements and Security Assessment Procedures Version 3.0 at [https://www.pcisecuritystandards.org/documents/PCI\_DSS\_v3.pdf](https://www.pcisecuritystandards.org/documents/PCI_DSS_v3.pdf). **For information on how to protect your customers’ data, give us a call at {phone} or send us an email at {email}. {company} can help you secure your systems and ensure PCI DSS compliance.** - [Tweet](https://twitter.com/share) #### ![BusinessOwnerGuidetoM&A-1](https://ontimetech.valeonetworks.com/hs-fs/hubfs/BusinessOwnerGuidetoM%26A-1.png?width=303&height=209&name=BusinessOwnerGuidetoM%26A-1.png) #### Download our eBook*THE ULTIMATE ROADMAP TO CMMC COMPLIANCE* by filling out the form below! [![Urgent Notice – Must Read Virus Warning: Cryptowall is on the Rise](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/Cryptowall-1.jpg)](https://ontimetech.valeonetworks.com/blog/urgent-notice-must-read-virus-warning-cryptowall-is-on-the-rise) #### [Urgent Notice – Must Read Virus Warning: Cryptowall is on the Rise](https://ontimetech.valeonetworks.com/blog/urgent-notice-must-read-virus-warning-cryptowall-is-on-the-rise) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Oct 21, 2014, 9:11:54 AM Your Anti-Virus Software & Firewalls WON’T Protect Your Machines Against this Dangerous Type of Ransomware! [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/urgent-notice-must-read-virus-warning-cryptowall-is-on-the-rise) #### [Add Layers of Security To Ensure Your Business is Compliant](https://ontimetech.valeonetworks.com/blog/business-is-compliant) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Nov 8, 2020, 8:48:44 PM Add Layers of Security to Your Business to Ensure Your Business is Compliant “Are you sure my business is compliant?” [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/business-is-compliant) [![Are You Running an HP Laptop Right Now? Stop Scrolling & Read This Immediately!](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/Screen-Shot-2014-09-09-at-9_54_56-PM-1.png)](https://ontimetech.valeonetworks.com/blog/are-you-running-an-hp-laptop-right-now-stop-scrolling-read-this-immediately) #### [Are You Running an HP Laptop Right Now? Stop Scrolling & Read This Immediately!](https://ontimetech.valeonetworks.com/blog/are-you-running-an-hp-laptop-right-now-stop-scrolling-read-this-immediately) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Sep 11, 2014, 5:43:11 PM HP Laptop AC Adapters Cause Burns and Property Damage [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/are-you-running-an-hp-laptop-right-now-stop-scrolling-read-this-immediately) ![OTT White logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/OTT%20Logo/OTT%20White%20logo.png?width=524&height=140&name=OTT%20White%20logo.png)   ##### About About On Time Tech is an IT Support and Computer Services company serving California. We provide services to the areas in and around We know businesses like yours need technology support in order to run highly-effective organizations. Leverage pro-growth technology services for your company now. ##### Explore On Time Time Explore On Time Time - [Our Services](https://ontimetech.valeonetworks.com/our-services/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources](https://ontimetech.valeonetworks.com/resources/) - [About](https://ontimetech.valeonetworks.com/about/) - [Contact](https://ontimetech.valeonetworks.com/contact/) ##### Contact Contact **San Francisco:** 1717 Fifth Ave San Rafael, CA 94901 [415-294-5250](tel:4152945250) Business Hours: M-F: 8AM-9PM - [Privacy Policy](https://ontimetech.valeonetworks.com/privacy-policy/) © 2026 On Time Tech [*Facebook*](https://www.facebook.com/ontimetechsf/)[*Twitter*](https://twitter.com/on_time_tech?lang=en)[*LinkedIn*](https://www.linkedin.com/company/ontimetech/)[*YouTube*](https://www.youtube.com/channel/UCubqs9PU_WWF-RFhfK9xNpw) [![Alura White logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/Alura%20White%20logo.png?width=295&height=115&name=Alura%20White%20logo.png)](https://alura.valeonetworks.com/) [![Next.I.T._White-Logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Next.I.T._White-Logo.png?width=328&height=136&name=Next.I.T._White-Logo.png)](https://next-it.net/) [![White-OTT-Logo-1-768x253](https://ontimetech.valeonetworks.com/hs-fs/hubfs/White-OTT-Logo-1-768x253.png?width=313&height=103&name=White-OTT-Logo-1-768x253.png)](https://www.ontimetech.com/) [![Valeo-Logo-White (1)](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Valeo-Logo-White%20(1).png?width=288&height=123&name=Valeo-Logo-White%20(1).png)](https://valeonetworks.com/) *Return to Top* ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Lance Stone", "url" : "https://ontimetech.valeonetworks.com/blog/author/ulisticadmin" }, "dateModified" : "2024-01-10T16:44:04.748Z", "datePublished" : "2014-04-14T19:42:24.000Z", "headline" : "Is Your Retail Business At Risk Of Customer Payment Card Theft? Read This Important Information Right Away.", "image" : [ "https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/pci-dss-compliance.jpg" ], "mainEntityOfPage" : { "@id" : "https://ontimetech.valeonetworks.com/blog/is-your-retail-business-at-risk-of-customer-payment-card-theft-read-this-important-information-right-away", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://ontimetech.valeonetworks.com/hubfs/OTT%20-%20Color%20Logo.png" }, "name" : "Valeo Networks" } } ```