Payment Application Security

Security of payment card transactions is a paramount issue to merchant and acquirer alike, whether through a desire to protect their customers or simply the need to comply with industry-wide requirements.

Payment Application Data Security Standard, or PA-DSS, is the latest component of Payment Card Industry (PCI) standardized requirements established by the PCI Security Standards Council (PCI SSC).

PA-DSS builds upon and expands best practices established and previously managed by Visa to ensure that software vendors and others develop secure payment applications that do not store sensitive card data.

This white paper examines the requirements and ramifications of PA-DSS compliance as well as steps that VeriFone is taking to ease adoption.