PCI council issues e-commerce guidance

The PCI Security Standards Council has released e-commerce data security guidelines to help  online businesses secure customer payment data.

More than 60 global organisations representing banks, merchants, security assessors and technology vendors worked on the guidelines which can be downloaded from the documents library on the PCI SSC website.

"E-commerce continues to be a target for attacks on card data, especially with EMV technology helping drive so much of the face-to-face fraud down in Europe and other parts of the world," PCI Security Standards Council European director Jeremy King said.

"We are pleased with this guidance that will help merchants and others better understand how to secure this critical environment using the PCI standards.”

As well as addressing the main e-commerce issues within the payment security space, the document includes two appendices to address specific PCI DSS requirements for e-commerce environments and for merchants and third parties scenarios.

This article originally appeared at scmagazineuk.com