12 Step Protection from abuse and card theft
PCI DSS (Payment Card Industry Data Security Standard) is the global security standard for card data.
It makes cashless payment more attractive and reliably protects you and your customers from abuse
and card theft. As an acquirer, service provider or retailer, you are obliged to abide by PCI DSS.
SIX supports you in implementing the twelve mandatory security requirements.
Networks and systems
Card owner details
- Install a firewall and ensure that it is regularly serviced.
- Do not use the standard settings provided by the manufacturer, for example system passwords or security parameters.
Vulnerability management program
- Protect your customers’ personal details.
- Always transmit card owner details in an encrypted form when using an open network.
- Develop and maintain secure systems and applications.
- Regularly update your antivirus software and programs.
- Restrict access to card owner details – physically as well as digitally.
- Identify and authenticate access to system components.
- Monitor access to network resources and card owner details.
- Regularly test all security systems and processes.
- Introduce information security guidelines for your staff.
Secure payment applications are the standard at SIX
PA DSS (Payment Application Data Security Standard) is the global security standard for the processing, storage and transmission of card data. All SIX Payment solutions, as well as the payment applications 3C Integra and cCredit, fully conform to this security standard. Put your trust in certified solutions as a retailer. Prevent card data theft and protect your company.
Play it safe – with PIN-capable payment terminals from SIX
PCI PTS (Payment Card Industry PIN Transaction Security) is the global security standard for payment terminal PIN entry. SIX Payment Services fully complies with this standard. Our payment terminals protect you and your customers from data theft and meet the strictest security criteria:
- Physical security – e.g. protection against tampering.
- Functional security – e.g. PIN encryption.
- Production security – e.g. monitoring during transport and during the allocation of encryption keys.
EMV: secure data transfer via chip
EMV is the technical standard for cashless payment and ensures the secure transmission of credit card data. Authentication occurs via a microprocessor chip rather than via the magnetic strip. The advantage for your customers: they can identify themselves via PIN rather than a signature and are therefore better protected if they lose their card. All SIX payment terminals are fitted with an EMV chip reader as standard.