Guarding Precious Cargo: The Evolving Function of Compliance Initiatives (CISP/SDP/PCI) in Protecting Cardholder Data

Table of Contents

1. Introduction

2. Card Association Security Compliance Programs

• 2.1. Visa CISP (Cardholder Information Security Program)
  • Annual Report on Compliance.
  • System Perimeter Scan
  • Annual Compliance Questionnaire
• 2.2. MasterCard SDP (Site Data Protection)
• 2.3. The Payment Card Industry (PCI) Data Security Standard
• 2.4. Card Data Compliance Programs from Discover, American Express, JCB and Diners Club

3. Security Compliance Vendors

• 3.1. Ambiron
• 3.2. SecurityMetrics
• 3.3. TrustWave
• 3.4. Ubizen
• 3.5. VeriSign

4. Compliance = the Cost of Doing E-Business

• 4.1. Cardholders Response to Security Breaches
• 4.2. Repercussions for Merchants, Acquirers and Service Providers

5. The Evolution of Security Compliance