ControlScan
We have partnered with ControlScan to save you $900 over their advertised pricing.About ControlScan
ControlScan is a market leader Internet security provider offering on-demand Network Security Audits and Vulnerability Management. ControlScan enables organizations to manage security from an attacker's perspective and fix real-world weaknesses before they are exploited.Executives and technicians simultaneously use ControlScan's Internet security services to measure security effectiveness, enforce security policy and comply with regulations. Every piece of cardholder account information that passes through the Visa payment system is vital to our business operation. However, without proper safeguards in place, this information can be extremely vulnerable to internal and external compromise(s), which can often lead to fraud and identity theft. Visa’s Cardholder Information Security Program (CISP) ensures the highest standard of due care to help keep sensitive cardholder data safe from hackers and fraudsters.
About the Program
What
Mandated since June 2001, Visa’s CISP is intended to protect Visa cardholder data—wherever it resides.Who
All members must comply and ensure the compliance of their merchants and service providers. The program applies to all payment channels, including card present, mail/telephone order, and e-commerce.How
To achieve CISP compliance, all members, merchants and service providers must adhere to the Payment Card Industry (PCI) Data Security Standard, which offers a single approach to safeguarding sensitive data for all card brands.Why
By complying with CISP requirements, Visa members, merchants, and service providers not only meet their obligations to the Visa payment system, but also build a culture of security that benefits all parties.CISP Compliance Validation
Separate and distinct from the mandate to comply with CISP requirements is the validation of compliance. It is a critical function that identifies and corrects vulnerabilities by ensuring appropriate levels of cardholder information security are maintained. Visa has prioritized and defined levels of CISP compliance validation based on the volume of transactions, the potential risk, and exposure introduced into the Visa system by merchants and service providers.Some merchants and service providers validate compliance through an Annual On-Site Security Audit and Quarterly Network Scan, while others complete an Annual Self-Assessment Questionnaire and the scan. Issuers and acquirers must also identify and review the list of all third-party service providers that they use or that are used by their merchants and ensure they are CISP-compliant.
CISP Resources | Overview | Payment Applications | CISP Compliance Validation Basics | What To Do If Compromised | Merchant Levels for CISP Compliancy | Service Provider Levels for CISP Compliancy | Assessors | Terms for CISP Compliancy
