|
|
 |
 |
|
| What is Account Information Security | | |
Account Information Security, or AIS, is a Risk Management program sponsored by Visa and run by Visa's members. The AIS program is a requirement for all entities participating in the Visa payment system i.e. those entities that process, store or transmit Visa cardholder account and/or transaction information, including merchants and service providers.To establish common industry standards, Visa and MasterCard produced the Payment Card Industry (PCI) Data Security Standard—a common set of industry requirements to ensure the safe handling of Cardholder information. The PCI standard have been developed to set a ‘minimum standard’ in the marketplace with regards to the protection of cardholder’s sensitive account and transaction information. Other global payment organizations have also endorsed the Standard and plan to adopt them as the framework for their respective programs.
| |
Who does AIS program apply to?
The AIS program is a requirement for all entities participating in the Visa payment system i.e. those entities that process, store or transmit Visa cardholder account and/or transaction information, including merchants, processors and Internet payment service providers. | |
What are the PCI requirements?
At a basic level, PCI consists of 12 key requirements for protecting Visa cardholder account and transaction information:
- Install and maintain a firewall configuration to protect data
- Do not use vendor-supplied defaults for system passwords and other security parameters
- Protect stored data
- Encrypt transmission of cardholder data and sensitive information across public networks
- Use and regularly update anti-virus software
- Develop and maintain secure systems and applications
- Restrict access to data by business need-to-know
- Assign a unique ID to each person with computer access
- Restrict physical access to cardholder data
- Track and monitor all access to network resources and cardholder data
- Regularly test security systems and processes
- Maintain a policy that addresses information security
The PCI Standards offered by the AIS program are designed to protect the confidentiality, availability and integrity of customer data.
The Standards represent the key requirements for handling or managing of Visa account information.
| | | |
|
|
|
