Society of Payment Security Professionals - Payment Security Blog

PCI search terms and their meaning

From time to time I check out the search terms that bring people to this blog.  Instead of just posting them, I’m going to do a little interpretation of what they might mean about the individual.

• “not pci compliant” - Concerned merchant that has just been notified they need to get P-C-I compliant.  Could also be a service provider whose clients say they will not work with them due to them being “not pci compliant.”
• “site:pcianswers.com segmentation” - Network administrator that is trying to reduce the scope of compliance.  They are targeted and want to get right to the point, while having someone define for them what “sufficient segmentation” really means.
• “pci compliance fines” - CFO or business analyst trying to create a business case analysis for why their company should get PCI compliant.  See also: “not pci compliant”
• “cpism certification” - Individual looking to advance their career, gain prestige, or increase the letters on their business card.  Also, person who is going toe-to-toe with a QSA and wants to improve their payment industry knowledge.
• “27001 vs pci” - European or Asia-Pacific compliance manager who is trying to better understand PCI through the eyes of ISO 27001.
• “atm skimmer icq” - ‘Carder’ or computer cracker interested in the illegal sale and distribution of credit card data.  Sorry, you won’t find that here!

So I suppose this web site is for all types.  We always hope to provide globally relevant data on the payment-card industry.  We do the research so you don’t have to.