PCI (DSS QSA) STUDY GUIDE RATED A.
How many characters are on Track 1
Up to 79
How many characters are on Track 2
Up to 40
What environment is eligible for SAQ A
Card not present
What environment is eligible for SAQ A-EP
Outsourced eCommerce merchants
What environment is eligible for SAQ B
Imprint only with no electronic cardholder data storage.
What environment is eligible for SAQ B-IP
IP connection to processor with no electronic cardholder data storage.
What environment is eligible for SAQ C
Segmented Payment application systems.
What environment is eligible for SAQ C-VT
Web based virtual terminals
What environment is eligible for SAQ D
All other merchants AND service providers
What is a QIR?
Qualified integrator and reseller
Entities that sell, install and or service payment applications on behalf of vendors.
what is PCI PTS
Payment Card Industry PIN Transaction Security devices
, How long is the cycle for a Standards Version?
3 years
Who is an issuer?
Bank or other organization issuing a payment card on behalf of a bank.
(Amex, Discover and JCB are also issuers)
Who is a Merchant?
The entity accepting a payment card during a purchase.
Who is a Acquirer ?
Bank or entity the merchant uses to process their transactions. (the merchant's bank)
Ultimately responsible to ensure their merchants are compliant.
What is Authorization?
Cardholder swipes card at merchant, acquirer asks payment brand network to
determine issuer, issuer approves purchase, payment network sends the approval to
acquirer, acquirer sends approval to merchant, merchant displays "approved" and
completes purchase.
What is Clearing?
Acquirer sends purchase information to payment network, payment network sends
purchase information to issuers, issuers prepare data for cardholders statements,
payment network provides complete reconciliation to acquirer.
What is Settlement?
Issuer determines acquirer via payment network, issuer sends payment to acquirer,
acquirer pay merchant for cardholder's purchases, issuer bills the cardholder.
What is a service provider?
A business that is not a payment brand, directly involved in the processing, storage
or transmission of cardholder data on behalf of another entity.
What is PCI DSS ?
How many characters are on Track 1
Up to 79
How many characters are on Track 2
Up to 40
What environment is eligible for SAQ A
Card not present
What environment is eligible for SAQ A-EP
Outsourced eCommerce merchants
What environment is eligible for SAQ B
Imprint only with no electronic cardholder data storage.
What environment is eligible for SAQ B-IP
IP connection to processor with no electronic cardholder data storage.
What environment is eligible for SAQ C
Segmented Payment application systems.
What environment is eligible for SAQ C-VT
Web based virtual terminals
What environment is eligible for SAQ D
All other merchants AND service providers
What is a QIR?
Qualified integrator and reseller
Entities that sell, install and or service payment applications on behalf of vendors.
what is PCI PTS
Payment Card Industry PIN Transaction Security devices
, How long is the cycle for a Standards Version?
3 years
Who is an issuer?
Bank or other organization issuing a payment card on behalf of a bank.
(Amex, Discover and JCB are also issuers)
Who is a Merchant?
The entity accepting a payment card during a purchase.
Who is a Acquirer ?
Bank or entity the merchant uses to process their transactions. (the merchant's bank)
Ultimately responsible to ensure their merchants are compliant.
What is Authorization?
Cardholder swipes card at merchant, acquirer asks payment brand network to
determine issuer, issuer approves purchase, payment network sends the approval to
acquirer, acquirer sends approval to merchant, merchant displays "approved" and
completes purchase.
What is Clearing?
Acquirer sends purchase information to payment network, payment network sends
purchase information to issuers, issuers prepare data for cardholders statements,
payment network provides complete reconciliation to acquirer.
What is Settlement?
Issuer determines acquirer via payment network, issuer sends payment to acquirer,
acquirer pay merchant for cardholder's purchases, issuer bills the cardholder.
What is a service provider?
A business that is not a payment brand, directly involved in the processing, storage
or transmission of cardholder data on behalf of another entity.
What is PCI DSS ?
