Anpassa din kassa- och betallösning
Ta ditt företag till nästa nivå med Loomis Pay som partner. Vi erbjuder en komplett kassa- och betallösning som kan skräddarsys efter din verksamhet.
Information about PCI DSS
Background
Merchants accepting card payments and service providers that could affect the security of the cardholder data environment, must comply with the security requirements defined in the Payment Card Industry Data Security Standard (PCI DSS).
Loomis Pay regulates this in the terms and conditions. A merchant is required to be PCI DSS compliant at all times and accordingly present documentation on request.
To expand on the details, below information provides a more technical and organisational guidance, in line with relevant requirements and the acceptance agreement.
Loomis Pay regulates this in the terms and conditions. A merchant is required to be PCI DSS compliant at all times and accordingly present documentation on request.
To expand on the details, below information provides a more technical and organisational guidance, in line with relevant requirements and the acceptance agreement.
What is PCI DSS about?
Below, we explain some common terms.
Money laundering
Money laundering means that someone, through various actions or transactions, tries to make money derived from criminal activity become legal, i.e., that the criminal traces are washed away. In addition to collaborations with other actors in the financial market, Loomis Pay, as support in our preventive work, has rules and a money laundering policy that we work from.
Financing of terrorism
Financing of terrorism means that someone financially supports terrorism, either with legal money or with money derived from criminal activity. Loomis Pay works proactively to prevent the financing of terrorism. To avoid us, as a financial actor, being exploited for the financing of terrorism, for example, we are prohibited from doing business with persons or organizations on the EU sanctions list.
Politically Exposed Person (PEP)
A person in a politically exposed position (PEP) is a person who has or has had important functions in a state or in an international organization, and also includes family members or known collaborators of such persons. As a financial actor, Loomis Pay must know if any representative in your business is a PEP.
Money laundering
Money laundering means that someone, through various actions or transactions, tries to make money derived from criminal activity become legal, i.e., that the criminal traces are washed away. In addition to collaborations with other actors in the financial market, Loomis Pay, as support in our preventive work, has rules and a money laundering policy that we work from.
Financing of terrorism
Financing of terrorism means that someone financially supports terrorism, either with legal money or with money derived from criminal activity. Loomis Pay works proactively to prevent the financing of terrorism. To avoid us, as a financial actor, being exploited for the financing of terrorism, for example, we are prohibited from doing business with persons or organizations on the EU sanctions list.
Politically Exposed Person (PEP)
A person in a politically exposed position (PEP) is a person who has or has had important functions in a state or in an international organization, and also includes family members or known collaborators of such persons. As a financial actor, Loomis Pay must know if any representative in your business is a PEP.
Where does it emerge from?
It was developed by the Payment Card Industry Security Standards Council (PCI SSC) – a global forum of industry stakeholders facilitated by the leading payment brands with the aim to fight increased card data theft and subsequent fraudulent use of stolen card data, thus addressing related evolving industry risks including financial liability for all parties involved and prevent loss of consumer trust.
What does PCI DSS Compliance mean?
PCI DSS Compliance is meeting PCI DSS requirements at all times and having valid documentation as proof thereof.
Valid PCI DSS compliance documents are either a correctly completed PCI DSS Self-Assessment Questionnaire (SAQ) or Attestation of Compliance (AoC) / Report on Compliance (ROC), which might have to be accompanied by clean Approved Scanning Vendor (ASV) scan reports.
PCI DSS validation must be renewed annually. Further ongoing security measures (e.g. quarterly ASV scans, regular software patching, network monitoring, change of passwords, etc.) are to be managed by the merchant or their assigned service providers.
In case any security requirement is not met, the merchant is required to instantly apply appropriate remediation measures to meet the security standards.
Valid PCI DSS compliance documents are either a correctly completed PCI DSS Self-Assessment Questionnaire (SAQ) or Attestation of Compliance (AoC) / Report on Compliance (ROC), which might have to be accompanied by clean Approved Scanning Vendor (ASV) scan reports.
PCI DSS validation must be renewed annually. Further ongoing security measures (e.g. quarterly ASV scans, regular software patching, network monitoring, change of passwords, etc.) are to be managed by the merchant or their assigned service providers.
In case any security requirement is not met, the merchant is required to instantly apply appropriate remediation measures to meet the security standards.
Who needs to be PCI DSS compliant?
The PCI DSS standard applies to all organisations that accept, store, process, or transmit cardholder data and/or sensitive authentication data or that could impact the security of the cardholder data environment (including merchants, processors, acquirers, issuers, and other service providers.
➔ It is an important responsibility for merchants accepting credit card payments to be PCI DSS compliant at all times and ensuring that all relevant service providers engaged by them are PCI compliant, too.
➔ PCI DSS compliance validation is also required for organisations that have fully outsourced all cardholder data functions to PCI compliant service providers.