PCI DSS compliance is now a legal requirement for anyone with merchant services, having just had to go through this myself and knowing that our clients are also going to have to do the same, I started searching for a simple guide that I could pass on to clients and came across this book.
Complying with the PCI Data Security Standard may seem like a daunting task for merchants. This book is a quick guide to understanding how to protect cardholder data and comply with the requirements of PCI - from surveying the standard's requirements to detailing steps for verifying compliance.
PCI Compliance for Dummies arms you with the facts, in plain English, and shows you how to achieve PCI Compliance.
And yes my company BlueThunder Internet is fully PCI DSS compliant before you ask :-)
Might be good to also mention that if you use a Third Party (PSP - Payment Service Provider) like RBS worldpay, you as a company don't need to be PCI complient on your website. Unless for some strange reason you capture card info.
Correct, but that should be made clear by your merchant provider as it should be the first question they ask you. But then saying that,we technically do not have to be as we technically don't own the server the card details are stored on, but I still have to complete the SAQ.
