In today’s modern world with the internet presence of businesses skyrocketing, it’s important to maintain proper security protocol to safeguard the personal information and privacy of yourself, your business, your staff and your customers. The websites designed by inConcert comply with both the Mass Privacy laws and also comply with PCI rules when producing eCommerce websites. Check out the Massachusetts Trial Court Law Libraries website for more details about Massachusetts internet laws and online policies.
As for PCI DSS 2.0 Compliance, eCommerce websites developed, hosted and maintained by inConcert Web Solutions are PCI Compliant as is required by the merchant services company. If a client decides to host and maintain their own website we can not guarantee PCI Compliance upon release of the website. Sometimes we have clients who use other hosting services, or maintain their own websites while we provide hosting. We always do our best to help each of our clients, of course, and recommend ways to keep their websites PCI Compliant (if they are not already doing so).
Upon completion of the eCommerce website, the site is reviewed and approved by the merchant services company for PCI Compliance before the site can be released. There are 12 standard rules of the Payment Card Industry (PCI) Data Security Standard (DSS) that our websites, hosting and maintenance conform to.
This includes but is not limited to:
- hosting on a fully PCI compliant dedicated server
- firewall protection
- a dedicated ip address with a 2048 bit encrypted SSL Certificate
- complex passwords and password storage redundancies
- server virus protection
- restriction of physical access to cardholder data
- unique user access IDs
- access logging
Even one breach of your website’s security can do serious damage to your company’s reputation. If your website doesn’t meet PCI standards, you should definitely take action to protect yourself and others as soon as possible. For more information on this topic, read our earlier blog article about security standards.