Blog

The latest thinking from Eckoh

PCI DSS compliance - Ten myths busted
Wednesday, 31 October 2018

Confused about PCI DSS compliance? It’s not surprising with the amount of different interpretations and myths circulating.

Ten facts PCI 900

As leaders in the field of Secure Payment solutions for PCI DSS compliance, Eckoh are in the best place to help you cut through the myths to the truth.

Below we’ve given clarity to the top ten myths so you can know exactly where you stand.

1. One vendor and provider will make us compliance

It won’t. Your entire contact center environment needs to be compliant.

2. Outsourcing card processing makes us compliant

There will still be elements of PCI DSS compliance within your business for which you are responsible.

3. PCI DSS compliance is an IT responsibility

It’s everyone’s responsibility, from IT to marketing, admin and finance. The ultimate responsibility lies at the top of the organisation.

4. PCI DSS will make us secure

It will mean that your customers’ personal and payment card data is secure not your organization.

5. PCI DSS is unreasonable: It requires too much effort and cost

Protecting your business against a data breach or theft cannot be considered unreasonable. You risk losing your customers, your reputation and your revenue by not taking this seriously.

6. We don’t take enough card payments to qualify

There is a PCI DSS compliance threshold to suit all sizes of organization and you should not ignore the responsibility of protecting your customers’ card and personal data.

7. PCI DSS compliance can be done in moments with a simple form

Self-Assessment is only applicable to certain organisations, depending on how they operate. Even then it can be complicated and hard to get right. It can drain your resources and time, even if you qualify for the simplest form SAQ A.

8. We completed a SAQ so we’re compliant

You may have been compliant on the day you completed the form, but have you maintained your compliance? It’s not a ‘check and forget’ activity. You need to live and breathe it, embedding the security into every aspect of your business.

9. PCI DSS is too hard.

Is going out of business too hard as well? What about losing your customers to the competition? Or, having to meet a hefty fine for a data breach? These are the risks you run in not complying.

10. PA-DSS means we are compliant

No, it doesn’t. It simply means that your software application complies to PA DSS. It does not make your business PCI DSS compliant.

Add to these the bewildering array of acronyms and it can soon become complicated. In ‘acronyms explained’ we provide you with an ‘at-a-glance’ guide to ones used in PCI DSS.

In the Definitive Guide to PCI DSS compliance you’ll find more vital information to help you really understand where you’re vulnerable to card fraud and the solutions that are available to help you comply.

If you’d like to know more about secure payments and PCI DSS compliance then give us a call on 866 258 9297 or drop us an email at This email address is being protected from spambots. You need JavaScript enabled to view it.

About the Author

Cameron Ross

Cameron Ross

Director of Payments Strategy

Over the last 20 years’ service with Eckoh, Cameron has led the Intellectual Property portfolio and R&D team to determine which new payment products we will launch to the market. He also works closely with clients and prospects to determine their compliance needs and fraud exposure risks where his ability to explain the complex so that our clients really understand what will be delivered has proved invaluable over the years. Cameron helped create Eckoh’s patented CallGuard technology which allows companies to remove sensitive card data from any existing call recording system.

Connect with us on LinkedIn

Tweets by @Eckoh

Eckoh (@Eckoh)

Eckoh (@Eckoh)

Extend the life of your trusty legacy #Aspect® systems with expert third-party support from Eckoh. bit.ly/2YqhzMp
Eckoh (@Eckoh)

Eckoh (@Eckoh)

The Eckoh team are set-up and ready to meet you at the PCI North America Community Meeting. Come and say hello to the team at Booth #6. We would love to share insights and knowledge with you around secure payment solutions for your contact center. #PCISSC
Eckoh (@Eckoh)

Eckoh (@Eckoh)

We are looking for a qualified Senior Software Engineer to lead a team of developers in Hemel Hempstead. You need to have expert knowledge of Linux server systems, web development, and famiarity with HTML, PHP, JavaScript, jQuery and more. Apply: bit.ly/2YOFq89 #careers