1.  Our Payment Processors have Installed and Maintain Firewalls to Protect Cardholder Data.  This Restricts Eexternal Threats and Prevents hackers from Accessing Infrastructure.

2.  Our Payment Processors have implemented Proper Password Protection on their Routers, Modems, Point-of-Sale [POS] systems.  Two Factor Authentication [2FA] is employed.  

3.Our Payment Processors Protect Stored Account Data by way of Encryption.  They maintain a list of scans to ensure no unencrypted data exists.  

4.  Our Payment Processors Encrypt Transmitted Data.  Transport Layer Security v1.2 or higher is applied to any public  applications and live websites.

5.  Our Payment Processors Protect all Systems and Networks from Malicious Software.  Up-to date anti-Malware and AnitVirus solutions are implemented on all systems.

6.  Our Payment Processors have Developed and Maintain Secure Systems and Software.  Policies and Processes are in place to keep Systems up-to-date, with Firmware and Security Patches implemented in a timely manner.

7.  Our Payment Processors have Restricted Access to System Components and Cardholder Data.  Access to cardholder data is only provided to Authorized Parties/Personnel.

8.  Our Payment Processors Identify Users and Authenticate Access to System Components.  Unique IDs are assigned to all personnel, ensuring accountability and traceability.  Users Authenticate using Strong Credentials before Accessing Systems.

9.  Our Payment Processors Restrict Physical Access to Cardholder Data.  The use Secure Physical Stroage and Multi-Factor Authentication to lock down data offline.

10.  Our Payment Processors Log and Monitor All Access to System Components and Cardholder Date.  Detailed Access Logs, Audit Trails, and Real-Time Monitoring is conducted on All Activity within the Cardholder Data Environment [CDE].  SIEM and FIM  protocols enable continuous Log Review.

11.Our Payment Processors Regularly Test the Security of Systems and Networks.  PCI DSS standards are mainained using as Approved Scanning Vendor [ASV] on a quarterly basis.  External and Internal Penetration Testing is conducted on System Components by deploying Intrusion Detection/Preventions Systems [IDS/IPS], Monitoring Network Traffic.

12.  Our Payment Processors support Information Security with Organizational Policies and Programs.  Chains of Command and Accountability are Clear and Easy to Understand.  Security Policies are available for employees to follow, and top-up Training to Combat Threat Evolution is a component of the Incident Support Plan.