Retailer with Physical Stores
Retailers that operate a traditional physical store environment will participate
in face to face transactions with consumers. PCI DSS does extend to cover these
types of environments, and typically merchants will find themselves falling in to
one of 3 different categories.
|
If the merchant operates a series of PDQ terminals that have dial up connectivity
through to an Acquirer, it is possible that they will fall under Self-Assessment
Questionnaire B. Nettitude recommends contacting our Free of Charge PCI DSS helpdesk
for validation that this is correct for your business model.
If the merchant has a single machine that is not network attached and the merchant
uses a Payment Provider on the Internet to process card payments, it is possible
that they will fall under Self-Assessment Questionnaire C, (or SAQ C-VT) Nettitude
recommends contacting our Free of Charge PCI DSS helpdesk for validation that this
is correct for your business model.
If the merchant operates 1 or more EPOS terminals that are network attached and
can communicate with other network resources, it is possible that they will fall
under Self-Assessment Questionnaire D. There are many factors that influence store
network connectivity and the advice offered for PCI DSS compliance. As a consequence,
Nettitude strongly recommends contacting our Free of Charge PCI DSS helpdesk for
validation that this is correct for your business model.
|
|
|
