THREAT‑WATCH
Glossary
PCI DSS
A security standard required for any organization that stores, processes, or transmits credit card data.
The Payment Card Industry Data Security Standard is mandated by card brands (Visa, Mastercard, etc.), not a government regulation, but non-compliance can result in fines and loss of card-processing privileges. Requirements cover network security, access control, encryption of cardholder data, and regular vulnerability scanning. Scope and validation requirements scale with transaction volume.