Society of Payment Security Professionals - Payment Security Blog

Discover creates merchant levels

Discover Network recently updated their DISC website and it was more than just a makeover.  Discover updated their information with new merchant levels that conveniently match those of both Visa and MasterCard.

Level 1 merchants are those processing 6 million or more Discover Network card transactions per year.  Simply due to the reduced market share of total transactions this would seem as though Discover may have far fewer Level 1 merchants than the other card brands.  Though this may be a non-issue as most merchants that accept Discover may also accept other card brands and will have validated already.

To date Discover has not publicly listed merchant levels leaving merchants unsure about how what specifically to submit to Discover.  Of course, since the requirements are universal, a merchant can always submit a report on compliance based on the PCI DSS.  Since the new merchant levels match those of other card brands, remembering the numbers is even simpler.

Also, much like other card brands, but validation principles are the same as well.  For example, Discover Network says that Level 1 merchants can validate using a QSA or their internal auditor.  I find that few level 1 merchants know they can validate using their internal audit department.  Knowing that can be a double edged sword for some merchants.  It’s nice to have an expert walk you through the process, but wouldn’t it be better if you knew everything that they did, and more.  I encourage companies to put their internal audit people through the CPISM/A certification if they are interested in self validating.