safe payments

Payment Card Industry Data Security Standard

The _________________ is a set of security requirements that can help small merchants to protect customer card data located on payment cards.

PAYMENT TERMINAL

A/An __________ is the device used to take customer card payments via swipe, dip, insert, tap, or manual entry of the card number.

ELECTRONIC CASH REGISTER

A/An ___________ (or till) registers and calculates transactions, and may print out receipts, but it does not accept customer card payments.

INTEGRATED PAYMENT TERMINAL

A/An___________ is a payment terminal and electronic cash register in one, meaning it takes payments, registers and calculates transactions, and prints receipts.

MERCHANT BANK

A/An ___________is a bank or financial institution that processes credit and/or debit card payments on behalf of merchants. Acquirer, acquiring bank, and card or payment processor are also terms for this entity.

ENCRYPTION

____________ makes card data unreadable to people without special information (called a key).

PAYMENT SYSTEM, cardholder data environment

A ________________ includes the entire process for accepting card payments. Also called the _________, your payment system may include a payment terminal, an electronic cash register, other devices or systems connected to a payment terminal (for example, Wi-Fi for connectivity or a PC used for inventory), and the connections out to a merchant bank.

E-COMMERCE WEBSITE

A/An ________________ houses and presents your business website and shopping pages to your customers. The website may be hosted and managed by you or by a third party hosting provider.

SHOPPING PAGES


Your _____________ are the web pages that show your product or services to your customers, allowing them to browse and select their purchase, and provide you with their personal and delivery details. No payment card data is requested or captured on these pages.

PAYMENT PAGE


Your ____________ is the web page or form used to collect your customer's payment card data after they have decided to purchase your product or services.

E-COMMERCE PAYMENT SYSTEM


A/An _____________ encompasses the entire process for a customer to select products or services and for the e-commerce merchant to accept card payments, including a website with shopping pages and a payment page or form, other connected devices or systems (for example Wi-Fi or a PC used for inventory), and connections to the merchant bank (also called a payment service provider or payment gateway).

e-commerce merchant

When you sell products or services online, you are classified as a/an

petroleum merchant

When you sell ptroleum and fuel, you are classified as a/an

PETROLEUM SYSTEM

A/An _____________ encompasses the entire process for a consumer to purchase petroleum either outside at an unattended Fuel Island or inside at a POS Terminal.

ELECTRONIC PAYMENT SERVER

A/An ___________________ (may also be part of the Site Controller) is a software payment application, usually present in a semi-integrated system, that gives point-of-sale (POS) systems a way to perform payment transactions in a standard way, independent of the payment networks providing authorization.

fuel site controller

It is a software application designed to interface with the various forecourt devices of a fuel station, but primarily the fuel dispensers. The _______________ handles both physical and logical device control. Typically, it controls the device states, makes sure unauthorized state changes are prevented, and ensures processes follow regulations and specifications.

FUEL ISLAND, self-service


A/An ___________ is the area of a convenience and retail fuel site where fuel dispensers are physically located. Generally, this is part of the site's forecourt. This can be either manned or unmanned. Unmanned fuel islands are often described as _________.

MANAGED NETWORK SERVICE PROVIDER

A/An __________________ is a service provider who administers site level network connectivity, failover, on premise network device configurations, remote connectivity such as VPN, and/or network security features.

MANAGED NETWORK SERVICE PROVIDER

The ______________ may be responsible for maintaining the controls that protect network devices from misconfiguration, including insecure configuration. These providers generally have remote access to a site's network, and thus a compromise of this system could lead to a compromise of the cardholder data environment.

BACK OFFICE PC, back office system

A/An _____________ is a dedicated personal computer used to manage nonconsumer business operations for a convenience and retail fuel site. The ____________ supports daily operational activities such as inventory management, price book, product supply, fuel management, site-level accounting, and daily reporting and journaling.

FORECOURT

The ________________ is the area where fuel dispensers are present and accessible to consumers wishing to refuel their vehicle. It is the area outside the salesroom or the convenience store of a fuel station where consumers park their vehicles while dispensing fuel.

payment service provider

What another term for a merchant bank?

Simple payment system
Complex e-commerce payment system
Complex payment system

List the three payment system types

Simple payment system

What type of payment system is for in-shop purchases

Complex e-commerce payment system

What type of payment system is for online shop purchases, with merchant managing their own website and payment page

Complex payment system

What type of payment system is for in-shop purchases, with Wi-Fi, cameras, Internet phones, and other attached systems

1. Use strong passwords and change default ones

2. Install patches from your vendors

3. Don’t give hackers easy access to your systems

4. Use anti-virus software

5. Scan for vulnerabilities and fix issues

6. Use secure payment terminals and solutions

7. Protect your business from the Internet

8. For the best protection, make your data useless to criminals

9. Protect your card data and only store what you need

10. Inspect payment terminals for tampering

11. Use trusted business partners and know how to contact them

12. Protect in-house access to your card data

1. List all 12 security basics to protect your business