PCI-DSS Standards

What is PCI DSS?

The Payment Card Industry Data Security Standard (PCI DSS) is a set of security standards designed to protect payment card holder data.

What is the SAQ?

The Self-Assessment Questionnaire (SAQ) is a tool that allows merchants to assess their compliance with PCI DSS. There are several types of SAQ, including SAQ-A and SAQ-D , tailored to different business environments.

With the evolution of PCI-DSS standards to version 4.0, compliance requirements are becoming much stricter. eZmax supports its clients during this transition by offering a secure solution that simplifies your certification process.

Here are a few recommendations to ensure you remain compliant:

✅ Obtain the appropriate certification: If you manually enter or store card numbers (e.g., over the phone), the SAQ-D certification is required. If you outsource all payment processing to a third party (such as eZmax , for example), or if your customers enter their own card numbers, the SAQ-A certification is sufficient.

✅ Request our AOC (Attestation of Compliance): During the certification process, you will need to request our AOC as proof of compliance. To request it, simply submit a ticket through your application by following the usual procedure.

✅ Act quickly: Moneris does not systematically perform checks, but we have noticed an increase in controls among businesses. It’s better to be proactive than to face penalties by assessing your compliance now. Fill out your SAQ and prepare your AOC so you can provide it if Moneris or a client requests it.

✅ Handle card numbers securely: It is essential to treat credit card numbers with care. For example, avoid writing them on a sticky note, sending them by email, or writing them on a form.

PCI DSS Quick Reference Guide: v4.0

https://docs-prv.pcisecuritystandards.org/PCI DSS/Supporting Document/PCI_DSS-QRG-v4_0.pdf

4.0 At a Glance:

https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Supporting%20Document/PCI-DSS-v4-0-At-A-Glance.pdf

AOC:

https://docs-prv.pcisecuritystandards.org/PCI%20DSS/Reporting%20Template%20or%20Form/PCI-DSS-v4-0-1-ROC-AOC-Merchants.docx

SAQ Guidelines:

https://docs-prv.pcisecuritystandards.org/SAQ (Assessment)/Instructions %26 Guidance/SAQ-Instructions-Guidelines-PCI-DSS-v4-0-1.pdf

**SAQ-A:

https://docs-prv.pcisecuritystandards.org/SAQ (Assessment)/SAQ/PCI-DSS-v4-0-1-SAQ-A.docx

SAQ-D:

https://docs-prv.pcisecuritystandards.org/SAQ%20(Assessment)/SAQ/PCI-DSS-v4-0-1-SAQ-D-Merchant.docx

AOC SAQ-A:

https://docs-prv.pcisecuritystandards.org/SAQ%20(Assessment)/SAQ%20AOC/PCI-DSS-v4-0-1-AOC-for-SAQ-A.docx

AOC SAQ-D:

https://docs-prv.pcisecuritystandards.org/SAQ (Assessment)/SAQ AOC/PCI-DSS-v4-0-1-AOC-for-SAQ-D-Merchant.docx