{"id":2707,"date":"2018-09-04T06:09:29","date_gmt":"2018-09-04T06:09:29","guid":{"rendered":"https:\/\/addcom.com\/wave\/?page_id=2707"},"modified":"2021-11-10T03:16:22","modified_gmt":"2021-11-10T03:16:22","slug":"pci-dss-compliance","status":"publish","type":"page","link":"https:\/\/wave.addcom.com\/?page_id=2707","title":{"rendered":"PCI DSS Compliance"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

PCI DSS Compliance<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

To protect customers, organisations taking credit card information\u00a0over the telephone are required to be fully compliant with the Payment\u00a0Card Industry Data Security Standard (PCI DSS). This ensures compliance with the requisite\u00a0security standards deemed necessary by the major credit card brands.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Recent studies show that 54% of contact centres consider compliance\u00a0to be either unattainable or years away. According to the Connected World: \u201cContact\u00a0centres that operate on behalf of customer organisations could suffer\u00a0severely should they be exposed as non-compliant.\u201d Non-compliance can lead to substantial fines and the lost of trust with the customers.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Obtaining Compliance<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Legacy recording systems can be a barrier to compliance as they may store card security codes\u00a0after authorisation. Even if this data is encrypted, it is not acceptable.<\/p>

Manually pausing and resuming call recording is also not an acceptable\u00a0method of protecting card-holder data. Agents may forget to\u00a0pause the recording of sensitive card-holder data, or they might\u00a0forget to resume recording, resulting in the failure to capture details of customer transactions.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

ADDCOM Wave provides a state-of-the-art recording system which automates PCI DSS compliance. It helps to build higher levels of trust with\u00a0existing and new customers through the assurance that their\u00a0credit card information is safe.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

PCI-DSS Solutions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

ADDCOM Wave PCI DSS solutions provide a seamless, integrated and compliant process ensuring that card data is never recorded or stored by agents.<\/p>

PCI de-scoping is available as an alternative. In this instance, calls are transferred to an automated credit card payment system, using Interactive Voice Response (IVR), or customers use their telephone keypads to enter the card data whilst on the telephone phone to an agent.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

If you outsource payment channels to a compliant service provider this does not automatically equate to PCI DSS compliance.\u00a0ADDCOM\u00a0Wave will review your current processes to determine the most cost-effective option and the best routes to take from a compliance perspective.<\/p>

A range of approaches are offered by ADDCOM Wave for obtaining PCI DSS compliance as listed below:<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Designated Handsets<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

For organisations that take a small number of payments in may be appropriate to have a number of non-recorded handsets next to payment terminals. When agents take payments they transfer the calls through to the non-recorded extension. This extension can be answered either by a dedicated payment team or by the agents themselves.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Payment IVR (Assisted)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Instead of taking sensitive information over the phone, agents can conference in an automated IVR system where caller enter the payment details using their telephone keypads with the assistance of agents if required. The tones being entered by callers are clamped (removed from the audio) to ensure they are not recorded or overheard by agents.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Automatic Silencing <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

An application is run on the agents\u2019 PC desktops that monitors for a payment portal being loaded. When a payment portal is detected, the current call recording for the agent will be silenced and when the payment portal is closed, the call recording will be un-silenced. Alternatively, ADDCOM Wave has a PCI DSS silencing API that can be called from applications to silence or un-silence calls at the appropriate time.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Payment IVR (Unassisted)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Instead of agents taking sensitive information over the telephone, they can transfer calls\u00a0to an automated IVR system where callers enter their payment details without being recorded.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

PCI DSS Compliance To protect customers, organisations taking credit card information\u00a0over the telephone are required to be fully compliant with the Payment\u00a0Card Industry Data Security Standard (PCI DSS). This ensures compliance with the requisite\u00a0security standards deemed necessary by the major credit card brands. Recent studies show that 54% of contact centres consider compliance\u00a0to be either […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":2699,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/wave.addcom.com\/index.php?rest_route=\/wp\/v2\/pages\/2707"}],"collection":[{"href":"https:\/\/wave.addcom.com\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/wave.addcom.com\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/wave.addcom.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wave.addcom.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2707"}],"version-history":[{"count":5,"href":"https:\/\/wave.addcom.com\/index.php?rest_route=\/wp\/v2\/pages\/2707\/revisions"}],"predecessor-version":[{"id":3381,"href":"https:\/\/wave.addcom.com\/index.php?rest_route=\/wp\/v2\/pages\/2707\/revisions\/3381"}],"up":[{"embeddable":true,"href":"https:\/\/wave.addcom.com\/index.php?rest_route=\/wp\/v2\/pages\/2699"}],"wp:attachment":[{"href":"https:\/\/wave.addcom.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2707"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}